Gigabyte: Hardware manufacturer affected by ransomware attack

Attack on hardware manufacturer Gigabyte. Last week, the company’s website was attacked by hackers as part of a ransomware attack. Data was also reportedly encrypted and stolen in the process.

Gigabyte’s IT systems offline

Gigabyte’s internal IT systems were hit by a ransomware attack over the weekend. In the process, the ransomware group, which operates under the name RansomEXX, according to the English-language news site Bleepingcomputer.com, reportedly encrypted and stole data.

The attack reportedly occurred during the night of Tuesday to Wednesday. Gigabyte, however, reportedly reacted quickly after suspicious events surfaced on the network and shut down the systems. Law enforcement agencies were also quickly informed. According to the manufacturer, only a small number of servers were affected, but Gigabyte’s internal support website is still down.

Over 100GB of data stolen

Bleepingcomputer reports that they have a copy of the extortion email. In it, the hackers demand money for the key to unlock the encrypted data and threaten to publish the stolen data if you refuse.

112 GBytes of data were stolen in the incident, they say. Among them is said to be confidential data from cooperation partners and suppliers such as Intel, AMD and American Megatrends. According to Bleepingcomputer, this is said to include sensitive data such as an “Ice Lake D SKU stack update schedule” from Intel.

The extortion email also included the hostnames of internal servers as additional evidence. At the same time, they threatened to increase the demand if they did not comply with the request to be contacted by an official representative of the company.