Fixxx
Moder
- Joined
- 20.08.24
- Messages
- 721
- Reaction score
- 2,525
- Points
- 93
A hacker is threatening to leak 106GB of data allegedly stolen from Spanish telecommunications company Telefónica in a breach that the company did not acknowledge. The threat actor has leaked a 2.6GB archive that unpacks into five gigabytes of data with a little over 20,000 files to prove that the breach occurred.
The breach allegedly occurred on May 30 and the hacker claims they had 12 hours of uninterrupted data exfiltration before defenders revoked access. The hacker claiming responsibility for the attack is known as "Rey" and is a member of the Hellcat Ransomware group - responsible for another breach at Telefónica in January through an internal Jira development and ticketing server.
The data was initially distributed using the PixelDrain storage and data transfer services but it was removed after a few hours for legal reasons. The threat actor later distributed another download link from Kotizada, a service then turned to another service, Kotizada, which Google Chrome flags as a dangerous site and strongly recommends users to avoid it. Until Telefónica provides an official statement, it is unclear if this is a new breach consisting of old data. However, some of the email addresses in the leak belong to active employees. The HellCat hacking group is not new on the scene and they are typically focused on targeting Jira servers. They are responsible for multiple attacks at high-profile companies. They claimed compromises at Swiss global solutions provider Ascom, Jaguar Land Rover, Affinitiv Schneider Electric, and Orange Group.
*Partial leak with data allegedly stolen from Telefónica.
The breach allegedly occurred on May 30 and the hacker claims they had 12 hours of uninterrupted data exfiltration before defenders revoked access. The hacker claiming responsibility for the attack is known as "Rey" and is a member of the Hellcat Ransomware group - responsible for another breach at Telefónica in January through an internal Jira development and ticketing server.
* threat actor announces Telefónica leak of 106GB.
The data was initially distributed using the PixelDrain storage and data transfer services but it was removed after a few hours for legal reasons. The threat actor later distributed another download link from Kotizada, a service then turned to another service, Kotizada, which Google Chrome flags as a dangerous site and strongly recommends users to avoid it. Until Telefónica provides an official statement, it is unclear if this is a new breach consisting of old data. However, some of the email addresses in the leak belong to active employees. The HellCat hacking group is not new on the scene and they are typically focused on targeting Jira servers. They are responsible for multiple attacks at high-profile companies. They claimed compromises at Swiss global solutions provider Ascom, Jaguar Land Rover, Affinitiv Schneider Electric, and Orange Group.