Lapsus$ Claims to Have Stolen 3GB of Data From AstraZeneca
Summary
Lapsus$ claims it stole roughly 3GB of AstraZeneca data, including credentials, code and employee information, and listed the company on its leak site. AstraZeneca has not confirmed the claim; a possible link to the Trivy attack is disputed.
Key points
- Lapsus$ claims to have exfiltrated roughly 3GB of AstraZeneca data and listed the company on its Tor-based leak site for sale without setting a price.
- The alleged data includes credentials and tokens, internal code, employee information, cloud infrastructure details and corporate account information.
- SocRadar reported project paths and file listings that it said may point to business operations and supply-chain workflows.
- AstraZeneca had not publicly confirmed the incident at the time of publication.
- A possible connection to the attack on Aqua’s Trivy vulnerability scanner was described as circumstantial, and researchers were skeptical.
Article Details
- Victim
- AstraZeneca
- Encryption Status
- Not disclosed
- Exfiltration Status
- Lapsus$ claims it exfiltrated data; AstraZeneca has not confirmed the claim.
- Exfiltrated Data
- Lapsus$ claims the data includes credentials and tokens, internal code repositories, employee data, cloud infrastructure information, and other enterprise data. The claim is unverified.
- Exfiltrated Size
- Roughly 3GB, according to Lapsus$’s claim.
- Ransom Demand
- No price was set for the allegedly stolen information offered for sale.
- Leak Status
- Lapsus$ added AstraZeneca to its Tor-based leak site and offered the allegedly stolen information for sale; the incident and data authenticity are unconfirmed by AstraZeneca.