ASUS listed on Everest ransomware leak site claiming data breach

• Ransomware group: Everest
• Country: Taiwan
• Sector: Technology
• Announcement date: December 2, 2025

Everest ransomware group claims data breach against ASUS

The threat actor known as Everest has officially listed the technology company ASUS on its leak site. According to the announcement, the group claims to have successfully targeted the organization and obtained various forms of internal data. This development follows a pattern of double extortion, a tactic where ransomware groups not only encrypt an organization's systems but also steal sensitive information to use as leverage during ransom negotiations.

The claim was posted on December 2, 2025, coinciding with the date the group alleges the attack took place. While the group has published a notification regarding the breach, they have not provided specific details regarding the total size of the stolen data or the specific number of files involved. Furthermore, there has been no mention of a specific ransom demand or a formal statement from the organization regarding the incident.

Details of the alleged intrusion

The Everest group has published a data leak claim regarding ASUS on their platform, alleging that they have gained unauthorized access to the organization's network. The threat actor asserts that this access allowed them to acquire a variety of technical files. The announcement indicates that the group has implemented a countdown timer, a common psychological pressure tactic used by ransomware groups to force an organization to establish contact within a specific timeframe.

Ransomware leak sites serve as a public stage for these groups to exert pressure. By listing a victim publicly, the attackers aim to damage the target's reputation and increase the likelihood of payment. Organizations typically respond to such threats by activating incident response protocols, which include isolating affected systems, conducting forensic investigations, and coordinating with law enforcement and legal counsel.

Alleged data types involved in the leak

According to the screenshots provided by the threat actor, the leaked information is highly technical and includes a wide range of sensitive materials. The group claims that the stolen data contains critical assets that could impact the company's operations and product development. The specific items identified in the claim include:

• Source code
• RAM dumps
• Firmware
• Calibration data
• Crash logs
• Configuration files

The claim also suggests the presence of other technical files such as binary segmentation modules, memory logs, AI models, OEM internal tools, test videos, and performance reports. The exposure of such diverse technical data suggests a deep level of access to the organization's internal systems.

Organization profile and potential impact

ASUS is a Taiwan-based multinational technology company that manufactures computer hardware, consumer electronics, and networking equipment. It offers a wide range of products including motherboards, laptops, monitors, and smartphones.

This leak claim may pose significant risks to the intellectual property and product security of a technology-focused organization like ASUS. The alleged exposure of source code and OEM tools could potentially facilitate future supply chain attacks or the exploitation of product vulnerabilities. Given the Everest group's history of data theft and extortion since 2020, negative impacts on the organization's operational continuity and brand reputation may be observed.

Furthermore, depending on the nature of the leaked data, legal processes under Taiwan's data protection regulations could be triggered, and secondary risks for customers may emerge. For organizations in the technology sector, maintaining robust security measures is essential to protect proprietary information and maintain customer trust. Common defensive steps include implementing zero-trust architectures, maintaining strict access controls, and conducting regular security audits to mitigate the risk of unauthorized network access.