Miami-based technology company Intcomex has suffered a major data breach , resulting in the leakage of nearly 1TB of its users’ data. Some of the data was leaked on September 14, 2020, and more on the 20th of the same month. The leak was the result of the company’s failure to comply with the criminals’ demands.
CyberNews.com researchers discovered the leaked data on an open Russian forum. So far, the leaked files are those titled “ Internal Audit ” and “ Finance ER .” The rest of the data is more sensitive and includes full credit card details, SSNs, passport and license scans, payroll information, banking documents, and more.
Intcomex serves more than 50,000 customers in over 41 countries, mostly in Latin America and the Caribbean . With such extensive information leaked publicly, the database is a goldmine for cybercriminals .
CyberNews.com notified Intcomex about the leak upon discovering it on September 21, 2020.
An Intcomex spokesperson said: “Intcomex has internally identified and responded to a attack involving some of our systems. As soon as we were made aware of the incident, we took decisive action to address the situation and protect our systems. We have immediately engaged cybersecurity experts to assist with the investigation and have implemented additional enhanced security measures. We have also notified law enforcement. We are notifying interested parties as appropriate. The services provided to our partners have not been impacted. The security of our systems and data remains our top priority.”
According to CyberNews.com, since the data breach was reported to Intcomex, the thread has been deleted from the forum, suggesting that either the ransom has been paid or that the malicious actors changed their minds and deleted the leaked data.
