RansomHouse Claims Credit for Trellix Repository Breach
Summary
Trellix said part of its source code repository was breached. RansomHouse claimed credit and posted screenshots apparently showing access to internal services; Trellix is investigating, and the claimed data theft remains unspecified.
Key points
- Trellix said part of its source code repository was breached.
- Trellix reported no evidence that its source code release or distribution process was affected, or that the code was exploited.
- RansomHouse listed Trellix on its leak site and posted screenshots that appear to show access to internal services and management dashboards.
- RansomHouse did not specify what data, if any, it stole; Trellix said it was aware of the claims and investigating.
- A possible connection to a supply-chain campaign linked to TeamPCP and Lapsus$ has not been confirmed.
Article Details
- Victim Organization
- Trellix
- Incident Type
- Part of Trellix's source code repository was breached. RansomHouse claimed responsibility and published screenshots that appeared to show access to internal services and management dashboards.
- Data Types Exposed
- Source code repository (breached; whether source code or other data was accessed or stolen is not disclosed)
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Trellix reported no evidence that its source code release or distribution process was affected, or that its source code had been exploited. No other operational impact was reported.
- Ransom Or Extortion
- RansomHouse claimed responsibility and listed Trellix on its leak website. No ransom demand or payment was reported.
- Claim Status
- claimed
Threat Actors
LAPSUS$Named as linked to a recent supply chain attack affecting cybersecurity firms. A possible connection between that campaign and the Trellix incident was reported but had not been confirmed.RansomHouseClaimed responsibility for the Trellix incident and listed the company on its leak website. The article says the group did not specify how much data was stolen or what type of data was involved.TeamPCPNamed as linked to a recent supply chain attack affecting cybersecurity firms. A possible connection between that campaign and the Trellix incident was reported but had not been confirmed.