A cybercriminal, alias “grep”, claims to have stolen 20 gigabytes of sensitive data from French tech and consulting giant Capgemini. The hacker shared details on the dark web forum BreachForums, stating that the stolen archive includes databases, source code, private keys, credentials, API keys, projects, employee data (names, email addresses, usernames, and password hashes), backups, and clients’ internal configuration details for cloud infrastructure.
The hacker claims to have exfiltrated only “big files” including company confidential information, Terraform, and more. They shared a few sample files, including alleged T-Mobile virtual machine logs.
Capgemini has remained silent on the matter so far, refusing to comment or confirm the hack. The company’s website and social media channels contain no statements on the issue.
As one of the largest consulting firms in the world, Capgemini provides IT consulting, managed services, and software development, helping businesses adopt new technologies. With over 50 countries and clients across various industries such as finance, healthcare, and manufacturing, a data breach could significantly impact the company’s reputation and operations.
Last year, Capgemini generated more than $24 billion in revenue, and this year it won a UK government contract worth up to $750 million. Under the deal, the company will run His Majesty’s Revenue and Customs’ legacy tax management systems until 2029.
Source: https://www.techradar.com/pro/security/hacker-claims-to-have-stolen-20gb-data-hoard-from-capgemini-and-is-threatening-to-leak-it-all