AVer Information listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Taiwan
• Sector: Technology
• Announcement date: February 6, 2024

Akira ransomware group claims data breach at AVer Information

The Akira ransomware group has listed AVer Information on its leak site, claiming to possess approximately 40 GB of the company's data. This announcement, made on February 6, 2024, suggests a significant breach targeting the technology manufacturer's internal systems.

Details of the alleged attack

According to the announcement published by the Akira group on February 6, 2024, the threat actors claim to have successfully compromised AVer Information. The group states that they intend to release a data set totaling 40 GB, which they allege was obtained directly from the company's network. The threat actors claim that this stolen data contains sensitive information regarding the company's operational and administrative processes.

While the group has made these claims, it is important to note that no screenshot was provided to support the assertion of the breach. Furthermore, no specific ransom demand has been disclosed by the group in relation to this incident.

Reported data types and contents

The announcement details that the stolen information includes various sensitive documents that could impact the company's internal operations and legal standing. The group claims the presence of several categories of sensitive information, including:

• Employee HR data
• Non-disclosure agreements
• Legal documents
• Project information

The inclusion of such files, such as signed non-disclosure agreements (NDAs) and confidential agreements, indicates that the breach may involve highly sensitive corporate intelligence and personal employee information.

About AVer Information

AVer Information is a technology manufacturer specializing in education, business communication, and wireless presentation technologies. The company develops video conferencing systems and educational technology solutions, positioning itself as a key player in the technology sector.

Potential impact and security implications

This alleged data breach may pose a significant risk of exposing the personal information of AVer Information employees. The potential release of confidential project and legal files could lead to the disclosure of trade secrets, which may result in damage to the company's competitive advantage. Such a breach may also lead to a loss of reputation among the company's clients and business partners.

Given the Akira group's known use of double-extortion tactics, the company may be susceptible to secondary attacks or targeted phishing campaigns. In a double-extortion scenario, attackers not only encrypt data but also threaten to leak it to increase pressure on the victim. This tactic often leads to subsequent waves of social engineering attacks, where the stolen information is used to target employees or customers directly.

Furthermore, the nature of the leaked data may impact the company's compliance processes under relevant regional data protection regulations. For organizations in the technology sector, maintaining strict adherence to data protection standards is critical to maintaining trust and avoiding legal repercussions. To defend against such threats, organizations typically focus on robust network monitoring, strict access controls, and comprehensive employee training to mitigate the risk of phishing and unauthorized access.

Public information regarding the Akira group remains limited, making it difficult to ascertain the full scope of their operations or their specific methodologies beyond these claims.