Cisco investigates breach after data put up for sale on BreachForums

A known data leaker claims to have broken into Cisco and stolen sensitive data from the company. As a result, the networking technology giant is now investigating the matter.

Earlier this week, a threat actor with the alias IntelBroker posted a new thread on the infamous BreachForums, offering Cisco data for sale: “Today, I am selling the Cisco breach that recently happened (6/10/2024). Breached by IntelBroker, EnergyWeaponUser, and zjj,” the ad states.

As per the thread, the archive includes Github projects, Gitlab projects, SonarQube projects, source code, hardcoded credentials, certificates, customer SRCs, confidential documents, Jira tickets, API tokens, AWS private buckets, Cisco Technology SRCs, Docker builds, Azure Storage buckets, private & public keys, SSL certificates, and more.

IntelBroker

IntelBroker also shared a small sample as proof of their claims, but did not elaborate on how the breach was done.

When asked for a comment, Cisco told BleepingComputer that it was looking into it, stating, "Cisco is aware of reports that an actor is alleging to have gained access to certain Cisco-related files," a company spokesperson told the publication. "We have launched an investigation to assess this claim, and our investigation is ongoing."

IntelBroker is a known leaker with a solid track record, so the breach could very well be legitimate. So far, the same hacker posted data belonging to T-Mobile, Home Depot, General Electric, and many others. Together with EnergyWeaponUser, the threat actor also allegedly breached AMD back in August this year.

However, they also had a few misses, such as the Europol breach that happened in early May this year. While advertised as a big deal, Europol played down its importance, saying that no operational data was obtained. The agency was still breached, though.

As is always the case with data breaches, this has left the affected parties at risk of identity theft, phishing attacks, and financial loss. Anyone concerned should stay vigilant and look into the best identity theft protection on offer.

Via BleepingComputer

More from TechRadar Pro

• Healthcare organizations are being hit hard by cyberattacks
• Here's a list of the best firewalls today
• These are the best endpoint protection tools right now