CommScope employees say they haven't been updated in more than a week on how the company is responding to the ransomware attack, which allowed hackers to steal a wealth of corporate and employee data from its systems.
See also: Nearly three-quarters of cyberattacks involve ransomware
Tech giant CommScope, which designs and manufactures network infrastructure products for corporations, hospitals, schools and federal networks, recently admitted to being attacked by ransomware on March 27, after some of its stolen files subsequently appeared online .
A ransomware gang, known as Vice Society, claimed responsibility for the attack by posting the stolen company data on the dark web leak site, which it uses to blackmail victims by threatening to publish internal files if a ransom is not paid.
The stolen data contains a wealth of internal documents, technical drawings, internal company databases, invoices and company expenses. Some of the data also includes personal information of employees.
See also: Second ransomware group reported to be exploiting GoAnywhere security flaw
Several CommScope employees told TechCrunch that their last communication from executives regarding the cyberattack was on April 18, stating that the company “continues to work rapidly to review and validate the data it claims was posted on the dark web.”
An email sent to employees a day earlier said the company “has no evidence” to suggest employee data was involved.
See also: PaperCut servers attacks: Clop & Lockbit ransomware gangs are responsible
TechCrunch has seen files containing the personal information of thousands of people who are or were once employed by CommScope. The files include home addresses, social security numbers and bank account information. Some of the files are dated, as they were compiled by an employee who no longer works at CommScope. Another file contains a list of thousands of former employees, their names, addresses and social security numbers. More recent data includes a file containing scans of some employees’ passports and unexpired immigration visas, including one belonging to a child.
Information source: techcrunch.com
