Actor Claims Defion Security Systems Breached Through Three ESXi Hosts
Summary
An unnamed actor claims to have compromised three publicly accessible ESXi hosts at Defion Security, escalated privileges, and taken company and partner data, including Splunk records and executive emails, now offered for sale. The claims are unverified.
Key points
- An unnamed actor claims to have compromised three publicly accessible ESXi hosts at Defion Security and escalated privileges.
- The actor allegedly took Splunk data, ticketing records, executive PST/OST emails, partner documents, and host backups.
- The article says an alleged extortion attempt failed after Defion Security patched a vulnerability and did not respond.
- The actor is reportedly offering the data for sale on a hacker forum; the article provides no independent confirmation of the claims.
Article Details
- Victim Organization
- Defion Security
- Incident Type
- Alleged compromise of three publicly accessible ESXi hosts, privilege escalation, and exfiltration of data; the actor reportedly attempted extortion and is offering the data for sale.
- Data Types Exposed
- Customer event logs
- Ticketing system records
- PST and OST email files of most C-level employees
- Private partner documents
- Backups of the three compromised ESXi hosts
- Operational Impact
- The actor claims to have gained deep access to Defion Security’s systems. No operational disruption is reported.
- Ransom Or Extortion
- An alleged extortion attempt reportedly failed after Defion Security patched the vulnerability and did not respond. The actor is reportedly attempting to sell the allegedly exfiltrated data on a hacker forum.
- Claim Status
- claimed
Products
ESXiDefion Security was allegedly breached after an actor compromised three publicly accessible ESXi hosts and escalated privileges to gain deep access to the company’s systems.Splunkpatched the vulnerability but did not respond, the actor is offering exfiltrated data—including a full Splunk dump, ticketing system records, C-level PST/OST email files, partner documents, and backups—for sale on a