Gigabyte Technology has fallen victim to a ransomware attack, Taiwanese media reported. Last week, attackers managed to hack the company’s servers, gaining 112 GB of confidential information. We note right away that the incident affected only a few internal servers, not production systems.
The affected servers are already online, Gigabyte told Taiwan’s United Daily News. Once the attack was detected, the company’s IT security teams took immediate action to contain the threat.
At the same time, the hacker group RansomExx threatens to publish the stolen 112 GB of information if Gigabyte does not pay the ransom. Among other things, this data includes corporate correspondence, as well as many documents under the NDAs of Intel, AMD and American Megatrends.
Gigabyte is still investigating exactly how the hack was carried out, but chances are that it all started with email phishing or credential theft, as is usually the case with such attacks.
Until 2018, the hacker group RansomExx was known as Defray and has repeatedly attacked Taiwanese companies, including Garmin, Acer, Compal, Quanta and AdvanTech. Last month, it disrupted Italy’s Covid-19 vaccination booking system and CNT, the state telecommunications company in Ecuador.
