Threat Actor Claims 3.6 TB ANSI Archive Was Exfiltrated
Summary
A hacker-forum post claims a threat actor exfiltrated a 3.6 TB archive from an ANSI internal vault, including more than 25,200 documents and committee records. The article provides no independent confirmation of the claim.
Key points
- A hacker-forum post claims an unnamed threat actor exfiltrated 3.6 TB from an internal ANSI vault; the article provides no independent confirmation.
- The archive reportedly contains more than 25,200 active, archived, and draft ANSI documents from 2023–2026.
- The actor allegedly took unpublished and rejected drafts from Standards Development Organization portals, along with committee comments, chats, emails, and meeting minutes.
- Other claimed contents include revision histories, pricing and access metadata, historical scans, and structured extracts from legacy systems.
- The post also claims the archive contains material overlapping with ASTM, ISO, NIST, and SAE, as well as backend and user query logs.
Article Details
- Victim Organization
- American National Standards Institute (ANSI)
- Incident Type
- Alleged unauthorized access and data exfiltration
- Data Types Exposed
- Active, archived, and draft standards documents
- Unpublished and rejected drafts
- Technical committee records, including member comments, chats, emails, and meeting minutes
- Document revision histories and change-tracking logs
- Metadata about pricing, bulk deals, and restricted access levels
- Historical file scans and structured XML extracts
- Backend technical data, including access and user query logs
- Affected Records
- More than 25,200 documents, according to the threat actor's claim
- Affected Data Size
- 3.6 terabytes, according to the threat actor's claim
- Operational Impact
- Not reported.
- Ransom Or Extortion
- No ransom demand or extortion terms reported. The threat actor allegedly offered the archive on a hacker forum.
- Claim Status
- claimed