15 April 2024

Dutch chipmaker Nexperia hit with a cyberattack


Dutch chipmaker Nexperia hit with a cyberattack

A Dutch chipmaker Nexperia Holding BV fell victim to a cyberattack last month, with attackers reportedly stealing a trove of data. The company, owned by Shanghai-listed Wingtech Technology, had to take some systems online upon discovering the breach.

Nexperia is currently collaborating with external cybersecurity experts to investigate the breach further. The intrusion, which occurred in March, involved unauthorized access by a third party to Nexperia's servers, leading to the compromise of sensitive data.

Dutch media outlet RTL Nieuws reported that the stolen data includes valuable customer information belonging to tech giants such as Apple, Huawei Technologies, and SpaceX. The cybercriminals responsible for the attack, identified as the Dunghill group, managed to pilfer hundreds of gigabytes of confidential material, ranging from trade secrets to intricate chip designs.

The group reportedly published a trove of compromised documents on the dark web, including internal emails and the passport of a former senior vice president of Nexperia.

The Dunghill Leak is a relatively new operation that made itself known in mid-April 2023. Dunghill Leak is run by a ransomware group that calls itself the Dark Angels Team. This is the same group that operated the self-named Dark Angels data leak site in 2022. Public reporting and the group’s data leak site indicate that they allegedly breached Sysco Corporation in late spring 2023 and Sabre Corporation and Johnson Controls International in September of the same year.


Back to the list

Latest Posts

What is Vulnerability Management? A Beginner's Guide

What is Vulnerability Management? A Beginner's Guide

In this article will try to cover basics of vulnerability management process and why it is important to every company.
11 September 2024
Cyber Security Week in Review: September 6, 2024

Cyber Security Week in Review: September 6, 2024

In brief: the US charges Russian GRU hackers for attacks on Ukraine, Apache, Cisco, Zyxel patch high-risk flaws, Google fixes Android zero-day, and more.
6 September 2024
Threat actors using MacroPack Red Team framework to deploy Brute Ratel, Havoc and PhantomCore

Threat actors using MacroPack Red Team framework to deploy Brute Ratel, Havoc and PhantomCore

Some of the documents appeared to be part of legitimate Red Team exercises, while other were intended for malicious purposes.
5 September 2024