Kensium Breach Claim Alleges 18 TB Exfiltration and 170 GB Data Release
Summary
An actor using the handle “skra” claims to have exfiltrated more than 18 TB from Kensium and released nearly 170 GB of source code and database backups. The breach and data claims are unverified.
Key points
- An actor using the handle “skra” claims to have exfiltrated more than 18 TB from Kensium.
- The actor claims nearly 170 GB of source code and recent database backups were released, with further releases planned.
- The claim references AWS S3 and EC2 and lists source code, personally identifiable information, and database backups.
- The supplied screenshot shows the actor's listing but not the hidden file tree or archive contents.
- The breach, exfiltration volume, release contents, and exposure of PII or AWS data have not been independently verified.
Article Details
- Victim Organization
- Kensium
- Victim Domain
- kensium[.]com
- Incident Type
- Alleged data breach and exfiltration
- Data Types Exposed
- Source code
- Personally identifiable information (PII)
- Database backups
- Affected Records
- Unknown
- Affected Data Size
- The actor claims more than 18 TB was exfiltrated and nearly 170 GB was included in the initial release; neither volume is independently verified.
- Operational Impact
- No operational impact is reported; the alleged breach and data exposure remain unverified.
- Ransom Or Extortion
- None reported
- Claim Status
- claimed
MITRE ATT&CK
T1213.003 · Code RepositoriesThe article gives this as an inferred mapping based on the actor's claim that the release contains Kensium source code; the repository source and acquisition path are not shown, and the activity is unverified.T1530 · Data from Cloud StorageThe article gives this as an inferred mapping based on the claim's reference to database backups from AWS S3 and data associated with EC2-hosted infrastructure; the activity is unverified.
Threat Actors
Vendors
Countries
Industries
Digital agencyThe post describes Kensium as a U.S.-based IT services and digital agency headquartered in Chicago, Illinois, specializing in ERP-connected e-commerce solutions.E-commerce integrationSectorIT services / digital agency / e-commerce integrationIT servicesThe post describes Kensium as a U.S.-based IT services and digital agency headquartered in Chicago, Illinois, specializing in ERP-connected e-commerce solutions.