Analog Integrations Corporation targeted by crazyhunter ransomware group

• Ransomware group: crazyhunter
• Country: Taiwan
• Sector: Technology
• Announcement date: March 30, 2025

Taiwanese technology firm listed in crazyhunter ransomware leak site announcement

The Taiwan-based technology company Analog Integrations Corporation has been listed in a ransomware announcement published by the crazyhunter group. According to the claims made by the threat actor, the organization's systems have been encrypted and a significant amount of data has been compromised. The announcement, which was made on March 30, 2025, marks a potential major security incident for the corporation.

Claims of system encryption and data theft

The crazyhunter group claims that they have successfully encrypted the systems of Analog Integrations Corporation. In addition to the encryption of local systems, the group alleges that they have exfiltrated 800 GB of data from the organization. The attackers have further stated that they have disabled the organization's backup systems, a tactic often used in modern ransomware attacks to increase pressure on the victim. The group has issued a ransom demand of 500,000 and has threatened to release the stolen data if this demand is not met.

The announcement provided by the group includes disparaging remarks regarding the security measures implemented by the organization. To facilitate communication regarding the ransom, the group has provided a Telegram address and a Tor-based site. This method of communication is typical for ransomware groups operating via leak sites, where they use encrypted or anonymous channels to negotiate with their targets.

The scope of the alleged data breach

The threat actor has provided specific details regarding the types of information they claim to have stolen. According to the claims, the compromised data includes highly sensitive information from various internal systems. The listed data types include:

• File server data
• CRM data
• BPM data
• EIP data
• ERP system data

The inclusion of such diverse data types suggests a broad reach into the organization's internal infrastructure, potentially touching upon customer relations, business processes, and enterprise resource planning.

About Analog Integrations Corporation

Analog Integrations Corporation (AIC) is a Taiwan-based technology company specializing in the design and manufacturing of power management integrated circuits (ICs). The company provides analog solutions primarily for computers, consumer electronics, and communication devices. Given its role in the technology sector, the company's operations are integral to various consumer and industrial electronic supply chains.

Potential impact and industry implications

This incident may lead to operational disruptions and the exposure of sensitive corporate data for Analog Integrations Corporation. If the data is leaked, the organization's intellectual property rights could be compromised, and secondary risks across the supply chain may emerge. Furthermore, the organization could face legal obligations under Taiwan's data protection regulations due to the potential exposure of sensitive information.

In the broader context of the technology sector, such incidents highlight the risks associated with double extortion, a ransomware tactic where attackers both encrypt data and threaten to leak it to maximize leverage. When an organization's backup systems are targeted, as is claimed in this case, the ability to recover through standard restoration procedures is severely hindered. For companies in the semiconductor and integrated circuit industry, the loss of intellectual property or sensitive system data can have long-term consequences for competitive advantage and supply chain trust.

While information about the crazyhunter group remains limited, the threat of data being released on public platforms remains high if the ransom demand remains unmet. Organizations facing similar threats typically focus on robust backup integrity, network segmentation, and strict access controls to mitigate the impact of such breaches.