Cisco confirms investigation into data breach claims

Cisco data breach overview: 

• Who: Cisco confirmed it is investigating a potential data breach after well-known threat actor IntelBroker began selling data it allegedly stole from the company on the hacking forum BreachForums. 
• Why: IntelBroker claims they and two other bad actors stole a large amount of developer data from the company during a data breach that allegedly occurred Oct. 6, 2024.
• Where: Cisco is a multinational technology company headquartered in San Jose, California.

Cisco has reportedly confirmed it is investigating a potential data breach after a well-known threat actor began selling data it allegedly stole from the company on a hacking forum. 

The investigation comes after a threat actor known as IntelBroker wrote on the BreachForums hacking forum that themselves and two others stole a large amount of developer data from the company during an alleged breach on Oct. 6, 2024, reports BleepingComputer. 

IntelBroker reportedly shared samples of the allegedly stolen Cisco devereloper data, including a database, customer information, a variety of customer documentation and screenshots of customer management portals. 

Cisco reportedly told BleepingComputer that it is aware of the reports an actor is alleging to have gained access to certain of its files and that it has subsequently launched a now-ongoing investigation into the claim. 

IntelBroker reportedly did not provide details on how the trio of bad actors obtained the data during the alleged Cisco data breach.

Threat actor previously leaked data from multiple different companies

The threat actor previously began selling or leaking data from a number of different companies in June, including AMD, Apple and T-Mobile, reports BleepingComputer. 

BleepingComputer said it is currently unknown whether the current allegations involving Cisco are related to the June data breaches, which reportedly involved data stolen from a third-party managed services provider for DevOps and software development. 

Cisco previously confirmed in 2022 that it suffered a data breach following an attack conducted by the Yanluowang ransomware group, which subsequently attempted to extort the company by threatening to leak the-around 3,100 stolen files on the dark web. 

The Cisco data breach was reportedly isolated to 2.75 GB of data harvested from a box folder linked to a single compromised employee’s account. 

Cisco said at the time that the files stolen during the data breach included data dumps, engineer drawings and non-disclosure agreements. 

Are you concerned about a potential Cisco data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• David’s Bridal class action claims retailer responsible for data breach
• MoneyGram class action claims data breach stole customer data
• Fidelity data breach confirmed, impacting 77K customers
• Wells Fargo class action claims data breach impacted customer info