Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

September 24, 2024 at 05:15AM

A hacker known as IntelBroker announced the theft of data from Deloitte’s improperly secured server on the BreachForums cybercrime forum. The stolen data includes email addresses, intranet communications, and internal settings and is available for download to forum users. Deloitte has confirmed the breach but states that client data is not affected. BreachForums’ credibility is questioned.

From the meeting notes, it is clear that a hacker known as IntelBroker announced the theft of data from an improperly protected server that allegedly belongs to Deloitte. The hacker claims to have obtained “internal communications” from an internet-exposed Apache Solr server that was accessible with default credentials. The stolen data includes email addresses, intranet user communications, and internal settings. This data is available for download to users of the BreachForums cybercrime forum or those who have purchased credits.

Deloitte has confirmed awareness of the claims and suggested that there was indeed a data breach, but they indicated that the impact is limited. They stated that there is no threat to client data or other sensitive information related to this incident.

It is important to note that BreachForums has been used by hackers to announce successful attacks on high-profile companies, but these claims are often false or exaggerated. Malwarebytes has also looked at posts advertising data leaks impacting other entities such as SpaceX and the White House and concluded that they are not worth the time of day.

In summary, the meeting notes provide information about the alleged data breach at Deloitte, but it is important to consider the potential exaggeration or falsification of these claims when evaluating the situation.

Full Article