Ransomware Group Targets Two Tech Companies With Data Theft Claims

A new ransomware group called D1R has posted claims on their website that they stole data from two companies: Synopsys and Bosch. The criminals say they exploited a vulnerability in the Synopsys website to access a corporate client database containing 40,000 entries. They are demanding ransom payments and threatening to publish the stolen data if they are not paid. Synopsys has investigated these claims and reports finding no evidence that a data breach actually happened. If you or someone in your family works for Synopsys or Bosch, pay attention to any communications from your employer about this situation. The claims focus on corporate data, which typically means business information rather than personal data about customers or the general public.

If you are a regular consumer who does not have a direct business relationship with these companies, this incident likely does not affect you directly. For employees of these companies, take these steps right away. First, check your work email for any security notifications from your IT department. Second, if your company asks you to change your password or take other security measures, do so immediately. Third, enable two-factor authentication on all work accounts if it is available. Fourth, be extra cautious about any unexpected emails, even if they appear to come from coworkers, as criminals sometimes use stolen information to craft convincing phishing attempts. Cybercriminals increasingly target businesses by exploiting website vulnerabilities or other security weaknesses. While companies work to protect their systems, families can protect themselves by practicing good security habits. Never reuse passwords across different accounts. Be skeptical of urgent emails asking you to click links or provide information. Keep your devices and apps updated with the latest security patches. These basic practices help protect your family regardless of what happens at any particular company.