A potential data breach has rocked the enterprise world, with ASRock Rack, a subsidiary of the renowned ASRock brand, allegedly falling victim to hackers. The threat of further breaches looms large, as the hackers claim to possess sensitive data that could compromise security across the board.
ASRock Rack, known for its enterprise-grade server storage and cloud hardware, has become the latest target of the Everest ransomware gang. Overnight, the gang listed ASRock Rack on their dark web leak site, boasting of a massive 509-gigabyte database theft.
The stolen data includes "electronic documents and files" containing confidential technical documentation and software related to firmware, BIOS, and various other critical components. Experts warn that this breach could have far-reaching consequences, potentially exposing vulnerabilities that hackers could exploit to compromise systems and devices.
Christiaan Beek, senior director of threat intelligence at Rapid7, highlights the very real risk of new vulnerabilities and the potential involvement of state-aligned parties. He emphasizes the impact of firmware and BIOS-related material, which could affect not just the victim organization but also the entire supply chain.
"We must consider the possibility of follow-on activities, such as accelerated vulnerability research or the malicious distribution of repackaged drivers and images," Beek adds.
However, the consequences of leaking this data extend beyond security vulnerabilities. Everest warns of potential reputation damage, impact on clients and partners, loss of trust, legal consequences, and a loss of intellectual property that could benefit competitors.
To add fuel to the fire, Everest plans to publish the allegedly stolen data in just under nine days, with no public disclosure of the ransom amount.
This incident follows closely on the heels of Everest's hack of an ASUS supplier, an event that ASUS has confirmed. The statement from ASUS highlights the impact on camera source code for their phones, but assures that user privacy and internal systems were not compromised.
Daniel Croft, a Western Sydney-born journalist with a passion for technology, brings us this exclusive report. With a degree from Macquarie University and experience writing for Momentum Media, Croft provides an insightful look into the world of cyber security.
Tags: Data Breach, ASRock Rack, Everest Ransomware, Supply Chain Security, Intellectual Property
