Acer confirms it leaked 160GB of sensitive data

Taiwan’s Acer confirms it was the victim of an invasion of one of its servers. The information was disclosed by the brand after criminals put a database up for sale. 160GB hidden file.

“We recently detected an incident of unauthorized access to one of our document servers for repair technicians. An Acer spokesperson said the investigation is ongoing and there is currently no indication that any customer data is stored on this server. Record.

in a broadcast Violation Forumscyber crime forum A hacker named Kernelware claimed responsibility for the attack. The criminal claims to have stolen 160GB of “various secret stuff” from Acer, including 655 directories and 2,869 files.

The attacker claims to have found confidential slides and presentations, technical personnel manuals, infrastructure data, product documentation, and spare digital keys. The directories also contained ISO files, BIOS and ROM components.

“To be honest, there are so many that it will take me days to go through the list of breaches,” Kernelware said. As said, the database is for sale and the criminal will only accept payment in Monero cryptocurrency.

The hacker also requests that the transaction be done through an intermediary. Finally, the attacker asks potential buyers of Acer files to send offers via private messages on the forum.

The dangers of Acer leak

While the leak does not include customer and employee personal and financial information, there is still a potential risk to Acer. Files may contain details of intellectual property and strictly confidential documents.

Such proprietary information about the company’s products can benefit competitors. For example, cybercriminals can use technical data to exploit flaws in brand-manufactured devices.

Acer fell victim to the REvil group’s ransomware in March 2021. In the same year, servers with company customer data in India and Taiwan were occupied by the Desorden group.