Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshotThe group claims Kontron North America has had a complete backup archive exfiltrated, totaling 2.37 TB across 911,939 files and 156,022 folders, and that they have published the data. They state the data includes Personal data, Financials, HR data, Contracts, Insurance policies, IT infrastructure data and Aerospace/defense data. The leak page identifies the victim as Kontron North America, a United States-based hardware manufacturing and software development company with 250-500 employees and about $1.3 billion in revenue.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Headquarters
- United States
- Employees
- 0
- Domains
- kontron.com
- Platforms
- Hyper-V Veeam
What was taken
Kontron North America is an American 'billionaire' in the IoT world, for decades selling 'secure connection solutions' to the world: Embedded boards for hospitals, factories, rockets and trains. We received a complete backup archive of the company - 911,939 files, 156,022 folders, 2.37 TB - and now we publish everything: salary Wells Fargo bank statements with full numbers accounts, contracts, insurance policies, confidential contracts with SpaceX and a working backup console with server names and employees' business emails. The company sold security to the world, with a slogan of 'secure applications' for IoT in medicine, aerospace, defense, and transport; the attackers publish an attack map and claim to have exposed personal data including home addresses and bank details.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- Fucked
- Page header shows 'Fucked'.
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.