Attackers Claim OVHcloud Breach Involving 1.6 Million Customer Records
Summary
Attackers claim they accessed OVHcloud’s parent account and took 1.6 million customer records and telemetry for 5.9 million domains. OVHcloud has not publicly confirmed the breach, and the leaked sample remains unverified.
Key points
- Attackers allege they accessed OVHcloud’s parent account.
- The claimed data includes 1.6 million customer records and telemetry for 5.9 million active domains.
- The article says the alleged dataset also includes domain telemetry, server configurations, and internal documentation.
- A sample was reportedly posted, but its authenticity has not been verified.
- The attackers are reportedly auctioning the data without a fixed ransom and offering intermediaries 30% of a transaction.
- OVHcloud had not publicly commented at the time of the article.
Article Details
- Victim Organization
- OVHcloud
- Incident Type
- Alleged parent-account compromise and data exfiltration
- Data Types Exposed
- Customer records and registered-user information
- Telemetry for active domains
- Hosted-domain architecture and site telemetry
- Databases and multimedia archives
- Server configurations
- Internal corporate documentation
- Affected Records
- Attackers claim to have exfiltrated 1.6 million customer records and telemetry for 5.9 million active domains; the claims and leaked sample remain unverified.
- Operational Impact
- No operational disruption is confirmed. The article says a confirmed compromise could affect customers whose domains are hosted by OVHcloud.
- Ransom Or Extortion
- The perpetrators are reportedly auctioning the dataset without a fixed ransom and offering intermediaries 30% of the final transaction.
- Claim Status
- claimed