Security News > 2021 > May > Bose Says Personal Information Compromised in Ransomware Attack
Bose Corporation last week started sending out breach notification letters to inform some individuals of personal data being compromised in a cyberattack identified on March 7.
The cyber incident, Bose says, resulted in ransomware being deployed across the company's environment, and in systems being taken offline, to contain the attack.
After restoring its systems, Bose discovered that the attackers were able to access sensitive information, including the personal data of former employees.
"On April 29, 2021, Bose discovered that data from internal administrative human resources files relating to 6 former New Hampshire employees of Bose Corporation was accessed and potentially exfiltrated," reads a copy of the notification letter filed with the New Hampshire Attorney General.
Personal information in those files, Bose reveals, includes names and social security numbers, along with compensation-related details, but the company is uncertain whether that data was indeed stolen or not.
"The forensics evidence at our disposal demonstrates that the threat actor interacted with a limited set of folders within these files. However, we do not have evidence to confirm that the data contained in these files was successfully exfiltrated, but we are also unable to confirm that it was not," Bose says.
News URL
Related news
- Surge in Magniber ransomware attacks impact home users worldwide (source)
- Keytronic reports losses of over $17 million after ransomware attack (source)
- UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack (source)
- McLaren hospitals disruption linked to INC ransomware attack (source)
- Six ransomware gangs behind over 50% of 2024 attacks (source)
- CISA warns of Jenkins RCE bug exploited in ransomware attacks (source)
- CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks (source)
- Most Ransomware Attacks Occur When Security Staff Are Asleep, Study Finds (source)
- Most ransomware attacks occur between 1 a.m. and 5 a.m. (source)
- New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data (source)