Trending

ee-track">
HomeBlog
One of the Largest Steel Sheet Companies in Southeast Asia Got Allegedly Breached by Maze

One of the Largest Steel Sheet Companies in Southeast Asia Got Allegedly Breached by Maze

Last year a Frost & Sullivan study commissioned by Microsoft found that a cyberattack can cost large manufacturing organizations based in the Asia Pacific region an average of $10.7 million in economic loss. Whereas, for mid-sized manufacturing organizations the average economic loss was $38,000.

During the monitoring of deepweb and darkweb leaks, our researchers came across the leak disclosure post in which the Maze ransomware operators allegedly breached Hoa Sen Group and claimed to be in possession of the company’s sensitive data.

Founded in the year 2001, Hoa Sen Group (HSG) based in Ho Chi Minh city is one of the private largest steel sheet companies in Southeast Asia. Hoa Sen Group has 7,100 employees across all its 343 companies and has been earning annual revenue of around $1.18 billion.

Below is the snapshot of the leak post published by the Maze Ransomware Operators-:

Screen Shot 2020 08 17 at 1.23.04 pm

After analyzing the company’s leaked data of around 1.64 GB, our researchers gathered some of the critical information as detailed below-:

  • Currently, the ransomware seems to have released the data files of HSG employees. For instance, multiple employment offer letters been released by the Hoa Sen Group been leaked.
  • Screenshots of people professionally dressed who seem to be employees of the company.
Screen Shot 2020 08 17 at 6.48.19 pm
Screen Shot 2020 08 17 at 6.48.22 pm
  • Resumes, academic documents, Identity cards of people who seem to be current employees of the company.
Screen Shot 2020 08 17 at 6.50.41 pm
Screen Shot 2020 08 17 at 6.46.05 pm
Offer letter issued by Hoa Sen Group
Screen Shot 2020 08 17 at 6.46.52 pm
  • Currently, the ransomware operators claims to have published 5% of company’s total data leak.

Cyble has been reporting these data breaches to aware individuals of the risks associated with using online services.

report-ad-banner

We recommend people to:

  • Never share personal information, including financial information over the phone, email or SMSs
  • Use strong passwords and enforce multi-factor authentication where possible
  • Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately.
  • Turn-on automatic software update feature on your computer, mobile and other connected devices where possible and pragmatic
  • Use a reputed anti-virus and internet security software package on your connected devices including PC, Laptop, Mobile
  • People who are concerned about their exposure in darkweb can register at AmiBreached.com to ascertain their exposure.

About Cyble

Cyble is an Atlanta, US-based, global premium cyber-security firm with tools and capabilities to provide near real-time cyber threat intelligence

Cyble Inc.’s mission is to provide organizations with a real-time view of their supply chain cyber threats and risks. Their SaaS-based solution powered by machine learning and human analysis provides organizations’ insights to cyber threats introduced by suppliers and enables them to respond to them faster and more efficiently.

This monitoring and notification platform gives the average consumer insights into their personal cybersecurity issues, allowing them to take action then as needed. It has recently earned accolades from Forbes as being the top 20 cyber-security companies to watch in 2020. 

Disclaimer: This blog is based on our research and the information available at the time of writing. It is for informational purposes only and does not constitute legal, financial, or professional advice. While we strive for accuracy, we do not guarantee the completeness or reliability of the content. If any sensitive information has been inadvertently included, please contact us for correction. Cyble is not responsible for any errors, omissions, or decisions made based on this content. Readers should verify findings and seek expert advice where necessary. All trademarks, logos, and third-party content belong to their respective owners and do not imply endorsement or affiliation. All content is presented “as is” without any guarantee that it is free of confidential, proprietary, or otherwise sensitive information. If you believe any portion of this content contains inadvertently shared or sensitive data, please contact us immediately so that we may address and rectify the issue. No Liability for Errors or Omissions Due to the dynamic nature of cyber threat activity, this [blog/report/article] may include partial, outdated, or otherwise incorrect information due to unverified sources, evolving security threats, or human error. We expressly disclaim any liability for errors or omissions or any potential consequences arising from the use, misuse, or reliance on this information.

Get Threat Assessment Report

Identify External Threats Targeting Your Business​
Free

Sectoral Threat Reports

Upcoming Webinars

CISO's Guide to Threat Intelligence 2024

CISO’s Guide to Threat Intelligence 2024: Best Practices

Stay Ahead of Cyber Threats with Expert Insights and Strategies. Download Free E-Book Now

Subscribe Now

Share the Post:
Scroll to Top