- A hacker named Rey Exfiltrated Tens of thousands of plates from orange Romania
- They required payment but orange refused
- The company is now investigating claims of data theft
Orange Group has confirmed to suffer a cyberattack recently, but has said it is still investigating allegations of valuable data were stolen.
A member of the Hellcat Ransomware organization, alias Rey, had access to a “non-critical application” belonging to Orange Romania, the company’s local branch. They gained access by utilizing compromised credentials and deficiencies in Jira.
The hacker recently started to exfilter data from the app and told later Bleeping computer They drew 380,000 unique E -mail addresses, source code, invoices, contracts and customer and employee information. In total, they grabbed about 12,000 files weighing approx. 6.5 GB, and although this was not a ransomware operation, the hacker left a ransom and tried to push the business into money. However, Orange started no negotiations, causing the striker to release the data on the dark web.
Confirmation of the attack
Shortly after, Orange confirmed that it suffered a cyber attack and that it looked at the case.
“Orange can confirm that our operations in Romania have been the target of a cyberattack,” a business representative said. “We took immediate action and our highest priority remains to protect the data and interests of our employees, customers and partners. There has been no impact on customers’ operations and the violation was found to occur on a non-critical back office application. “
The publication also analyzed a data robbery and said that while verified it was “quite old”.
Some E -mail addresses were used by individuals who worked or collaborated with Orange Romania, more than half a decade ago. Other names and e -mail addresses belonged to Yoxo customers, Orange’s subscription service without contract period, which means it is difficult to determine whether the data is still valid or not.
Some of the partial debit card information found had expired a long time ago, Bleeping computer Added.