US system-on-chip (SOC) manufacturer MaxLinear has revealed that some of its IT systems were encrypted by the operators of the Maze Ransomware last month. The initial breach took place around mid-April.
Data breach after stolen data leaked online
MaxLinear sent a data breach notification to affected individuals on June 10. The company said the Maze Ransomware attack was discovered on May 24
"We immediately took all systems offline, called in experts from other companies to assist in our investigation, contacted law enforcement, and worked diligently to safely restore our systems," the notice states.
“Our investigation to date has identified evidence of unauthorized access to our systems from April 15, 2020 to May 24, 2020.”
MaxLinear says it was able to restore some of the systems affected during the ransomware attack and that its IT staff is still working to restore the rest.
On June 15, the gang behind the Maze Ransomware leaked 10.3GB accounting and financial information of 1TB of data was stolen.
Personal and financial information is exposed online
MaxLinear says the exposed information may include personally identifiable information (PII) and financial information such as “name, personal and business email address , personal mailing address, employee ID number, driver’s license, financial account information, social security number, date of birth, place of employment,” and more.
According to documents filed with the US Securities and Exchange Commission (SEC) on June 16, the Maze Ransomware attack did not affect shipping, order fulfillment, or manufacturing operations . It was also said that MaxLinear does not intend to pay the ransom demanded by the Maze Ransomware gang
