A group of hackers calling themselves Team Hans have managed to gain access to corporate information belonging to Canadian telecommunications and media company Rogers Communications.
The hackers announced their success on Twitter and also provided a link to the information they stole, to prove their claims.
The dump is over 400MB in size and includes contracts with corporate customers, corporate emails, sensitive employee information (IDs, documents), as well as the credentials for the VPN (Virtual Private Network), which allows access to the company's internal infrastructure.
According to the hackers' narrative regarding the incident, which was published by DataBreaches, the intrusion was achieved by persuading someone from the support desk to provide the identity and answers to the security questions for a mid-level employee (account manager) named Antonio Marino. To accomplish this, the hackers pretended to be employees of Rogers Communications.
After obtaining the sensitive information, they contacted again, this time impersonating Marino and requested the password for his corporate Outlook, which they obtained by providing the correct answers to the security questions, as required by the process.
Through the employee's e‑mail, the hackers managed to reach the company's internal network and extract all data considered significant.
Team Hans gained access to the corporate network on February 20 and attempted to extort Rogers Communications for 70 bitcoins (today $ 19.160 / € 17.140) in exchange for keeping the stolen data, but the company did not pay, resulting in the hackers publishing everything.
According to the company's announcement, Team Hans gained access to business agreements that included the names of the businesses, addresses and phone numbers along with billing details. No personal information is included in the contracts, or other data that could lead to a breach of bank accounts
