ALL RING TECH CO., LTD. listed on leak site by bert ransomware group
Taiwan-based technology firm ALL RING TECH CO., LTD. has been listed on a leak site by the threat actor known as bert.
- Published
- 2 min read
- 2 min read
- Ransomware group: bert
- Country: Taiwan
- Sector: Technology
- Announcement date: May 16, 2025
Taiwanese technology firm targeted by bert ransomware group
The threat actor known as bert has listed the Taiwan-based technology firm ALL RING TECH CO., LTD. on a ransomware leak site. The announcement, made on May 16, 2025, claims that the group has successfully compromised the organization's systems and exfiltrated a significant volume of sensitive information.
Details of the claimed data exfiltration
According to the announcement made by the group bert, the threat actor claims to have obtained data allegedly belonging to ALL RING TECH CO., LTD. The group asserts that the total volume of exfiltrated data amounts to 5 TB. To support their claims, the threat actor provided various documents as samples in the announcement, which appear to relate to the company's commercial operations and its broader supply chain.
The provided screenshots and samples suggest that the compromised information includes a variety of sensitive corporate documents. The specific types of data identified in the leak include:
- Banking information
- Supplier data
- Purchase orders
- Technical drawings
While the group has provided these samples to demonstrate the scope of the breach, no specific ransom demand has been made public in the announcement.
About ALL RING TECH CO., LTD.
ALL RING TECH CO., LTD. is a technology company headquartered in Taiwan. The organization specializes in the production of advanced automation equipment. Their product lines serve several critical industrial sectors, including the semiconductor, LED, passive component, and solar industries.
Risk assessment and industry implications
This incident may pose a significant risk regarding the exposure of the company's trade secrets and sensitive supply chain data. The presence of financial information within the leaked documents could potentially lead to financial fraud or facilitate targeted phishing attacks against both the company and its various business partners. Furthermore, the company may face legal obligations under the data protection regulations established in Taiwan.
The threat actor's actions appear to follow the pattern of double extortion tactics. In such scenarios, ransomware groups do not merely encrypt a victim's systems but also steal sensitive data to use as leverage. By threatening to release private information publicly, the attackers attempt to increase the pressure on the organization to meet their demands.
Information regarding the specific capabilities and identity of the group bert remains limited. In the technology and manufacturing sectors, such breaches highlight the importance of robust data protection strategies. Organizations in these highly specialized industries often face increased risks due to the high value of their technical drawings and supplier relationships. Defensive measures typically involve implementing strict access controls, monitoring for unauthorized data transfers, and maintaining rigorous security protocols for all commercial and technical documentation to mitigate the impact of potential exfiltration events.