Network Security
Vulnerability Management
Privileged Access Management
Endpoint Security
Threat Hunting
Unified Endpoint Management
Email & Collaboration Security
Contents:
HTC Global Services, an IT services and business consulting organization, has admitted that it was the victim of a cyberattack following the ransomware group ALPHV’s publication of screenshots containing stolen data.
HTC has yet to make an official statement on its website, but it issued an announcement acknowledging the cyberattack on its X/Twitter page that reads:
HTC has experienced a cybersecurity incident. Our team has been actively investigating and addressing the situation to ensure the security and integrity of user data. We’ve enlisted cybersecurity experts and are working to resolve it. Your trust is our priority.
HTC Global Service (Source)
HTC Is Investigating the Incident
HTC’s team has been actively investigating the incident and addressing the situation to ensure the security and integrity of their users’ data. They are currently working with cybersecurity professionals to resolve the issue.
The announcement came after the notorious ALPHV (BlackCat) ransomware group listed HTC on their data leak site together with some screenshots of allegedly stolen data.
According to the screenshots, the leaked data includes passports, contact lists, emails, and other confidential documents of the company.
HTC Global Services Entry on ALPHV’s Site (Source)
Although little information is known about the cause of the breach, cybersecurity professional Kevin Beaumont has a theory. He believes that the company was breached through the Citrix Bleed vulnerability.
According to Beaumont, CareTech, one of HTC’s business units, operated a vulnerable Citrix Netscaler device, which was exploited by the ALPHV group for initial access to the company’s network.
ALPHV/BlackCat is nowadays one of the most active threat groups around. Since its launch in November 2021, the group build an impressive roster of victims, including most recently MGM and Tipalti.
If you liked this article, follow us on LinkedIn, Twitter, Facebook, and Youtube for more cybersecurity news and topics.
Cristian is a Content Editor & Creator at Heimdal®, where he developed a deep understanding of the digital threat landscape. His style resonates with both technical and non-technical readers, proof being in his skill of communicating cybersecurity norms effectively, in an easy-to-understand manner.
