Gunnebo, a Swedish security company, is warning its customers that their data has been leaked onto the Darknet, following a cyberattack . Gunnebo is a multinational company based in Gothenburg, Sweden, which has a client list that includes airports, nuclear power plants, banks and hospitals . It specializes in security products, services and solutions mainly in the areas of cash management, access control, secure storage and integrated security.
Hackers breached servers in August 2020 in a highly organized attack reported to the Swedish security agency, Säpo. Gunnebo CEO Stefan Syrén said the hackers uploaded 38,000 files to a public server after management refused to negotiate a ransom payment.
Earlier this week, the Swedish newspaper “Dagens Nyheter” reported that a large volume of sensitive and confidential data belonging to Gunnebo customers was leaked onto the Darknet.
Reuters reported that three security experts confirmed that an 18-gigabyte file containing Gunnebo customer data was available for download.
The data exposed in the leak included security settings for the Swedish parliament, systems and information about bank vaults. Other data exposed by the hackers included documents with information about alarm systems and surveillance cameras used at a branch of SEB bank in Sweden.
Syrén stated the following in an official statement: “We are aware that our files are available on the Darknet and we regret that this is happening. Unfortunately, this is how computer criminals operate. Therefore, I would like to emphasize that there was never an alternative for Gunnebo to pay a ransom to delete the files. The only way to limit this type of crime is for victims not to pay the demanded ransom. We can only assume who the target of the attack was, but since we cannot rule out that it was an attempt at industrial espionage, it was important to follow the regulations and, therefore, we decided to inform Säpo.”
