Threat Actor: Unknown | Unknown
Victim: State Grid Corporation of China (SGCC) | State Grid Corporation of China
Price: $1000
Exfiltrated Data Type: Corporate user accounts, user information, department details, roles, eIDs, usernames, phone numbers, emails, employee numbers, passwords
Additional Information:
- A threat actor claims to have gained access to a third-party system and acquired sensitive information belonging to the State Grid Corporation of China (SGCC).
- The compromised data includes corporate user accounts, user information, department details, and roles.
- The exfiltrated data contains information on thousands of employees, including eIDs, usernames, phone numbers, emails, employee numbers, and passwords.
- The threat actor is offering the data for sale at $1000 with escrow services involved.
- The data is available in SQL and XLSX formats.
- Contact details for inquiries have been provided on Telegram.
- The breach highlights the need for robust cybersecurity measures for major utility companies like SGCC.
- Monitoring the potential implications for both the corporation and its employees is important as the situation develops.
A threat actor has claimed to have recently gained access to a third-party system, thereby acquiring sensitive information belonging to the State Grid Corporation of China (SGCC). SGCC is a state-owned electric utility corporation and the largest utility company in the world.
The alleged data breach includes several categories of information, such as corporate user accounts, user information, department details, and roles. The compromised data reportedly contains information on thousands of employees, including their eIDs, usernames, phone numbers, emails, employee numbers, and passwords.
The threat actor is offering this data for sale at $1000, with escrow services involved to facilitate the transaction. The data is available in SQL and XLSX formats.
For inquiries, the threat actor has provided contact details on Telegram.
The breach of such sensitive information from a major utility company like SGCC highlights the critical need for robust cybersecurity measures. As this situation develops, it will be important to monitor the potential implications for both the corporation and its employees.
Original Source: https://dailydarkweb.net/threat-actor-claims-sale-of-state-grid-corporation-of-china-sgcc-data-worlds-largest-utility-company/