Actor Claims Live Access to Conference-Space Company Support Platform and Exposure of 6,027 Users
Summary
An actor claims live access to an unnamed conference-space company’s support platform and exposure of user and ticket data. The breach, dataset contents and client relationships have not been independently verified.
Key points
- The actor, using the handle “Erich,” claims access came through a support panel and remains active; the target company is unnamed.
- The post lists 6,027 users, 24,753 tickets, 387,388 comments, 274,294 system notes and 115,948 attachment rows.
- Claimed user fields include names, email addresses, phone numbers, company details, IP addresses and user-agent information.
- The actor says no attachment files were downloaded, but claims access remains available and that a brief review found debug logs and some 2018 NATO-related material.
- The actor names public-sector, international, technology and enterprise organizations as clients; the article says the screenshot does not establish that those organizations were directly compromised.
- The report says its screenshot documents the claim and listed statistics, not independent confirmation of the breach, live access, data contents or client relationships.
Article Details
- Victim Organization
- Unnamed conference-space company
- Incident Type
- Unverified breach claim involving alleged access through a support panel and continued access to support-platform data.
- Data Types Exposed
- User email addresses
- First and last names
- Phone numbers
- Company IDs and company names
- Department and location fields
- Last-seen timestamps
- IP addresses
- User-agent data
- Ticket, comment, system-note, and reply data
- Attachment records; the actor claimed attachment files were accessible but not downloaded
- Affected Records
- The actor claimed the platform contained 6,027 users, 24,753 tickets, 387,388 comments, 274,294 system notes, 113,094 real replies, and 115,948 attachment rows. These counts have not been independently verified.
- Operational Impact
- No operational disruption is reported. The actor claims access remains live; this has not been independently verified.
- Ransom Or Extortion
- No ransom demand or extortion activity is reported in the supplied material.
- Claim Status
- claimed
MITRE ATT&CK
T1119 · Automated CollectionThe article labels this an inferred mapping; the claimed volume and structured counts were described as consistent with bulk or automated collection if the claim is accurate.T1213 · Data from Information RepositoriesThe article labels this an inferred mapping based on the actor's unverified claim of collecting structured support-platform data.