Pierluigi Paganini
March 13, 2024
Acer Philippines confirmed that employee data was compromised in an attack targeting a third-party service provider.
In our commitment to full transparency, we wish to inform you of a recent security incident involving a third-party vendor managing employee attendance data. pic.twitter.com/SXDeZ3I27B
— Acer Philippines (@AcerPhils) March 12, 2024
Acer Inc. is a Taiwanese multinational company that produces computer hardware and electronics,
Acer is investigating the security breach with the help of cybersecurity experts and notified the National Privacy Commission (NPC) and the Cybercrime Investigation and Coordinating Center (CICC) in the Philippines.
The hacked third-party company manages the Acer employee attendance data. Threat actors, that go online with the moniker ph1ns, leaked the stolen data on a hacking forum claiming that it was stolen from the HR department of the Taiwanese company.
‘ph1ns’ published a link to a database containing stolen data.
ph1ns told Bleeping Computer that Acer was hacked, but threat actors did not deploy any ransomware.
Acer is aware of the data breach, but pointed out that a limited set of employees has been impacted and no customer data has been compromised. The Acer’s infrastructure was not impacted by the incident.
It isn’t the first time that Acer suffered a security breach, in March 2023 the Taiwanese multinational hardware and electronics corporation disclosed a data breach after a threat actor claimed the hack of the company
A threat actor announced the availability for sale of 160 GB of data allegedly stolen from the Taiwanese multinational hardware and electronics corporation.
The threat actor announced the hack on a popular cybercrime forum, he claimed the theft of about 2869 files. The stolen files include confidential product model documentation, binaries, backend infrastructure, BIOS information, and other sensitive data.
In October 2021, the tech giant was hacked twice in a week, the same threat actor (Desorden) initially breached some of its servers in India, then he claimed to have also breached some systems in Taiwan.
In March 2021, the REvil ransomware group hacked the company and demanded a record ransom payment of $50 million.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, data breach)
