Taiwanese computer giant Acer has confirmed a data breach after a threat actor hacked a server hosting private documents used by repair technicians. The hacker claims to have stolen 160GB of data, which includes technical manuals, software tools, backend infrastructure details, product model documentation, BIOS images, ROM files, ISO files, and replacement digital product keys (RDPK).

Acer stated that their investigation so far does not indicate that this security incident has impacted customer data, and the hacker has been attempting to sell the entire dataset to the highest bidder for the hard-to-trace cryptocurrency Monero (XMR).

This is not the first security incident that Acer has suffered in the past few years. In March 2021, the computer maker was hit by the REvil ransomware gang, while in October 2021, Acer’s after-sales systems in India and Taiwan were breached by a hacking group known as Desorden, which stole employee information, including login credentials.

How to Protect Your Business from Data Breaches

Chris Close, a cyber security expert from Cyber Sleuth Security’s Philadelphia office, believes that businesses can take several steps to protect their data from potential breaches.

"The first step a business should take is to assess their current security measures. Identifying any vulnerabilities is key to preventing a breach from occurring," Chris said.

Chris also suggested that businesses should invest in reliable security software and keep it up to date. "It's important to make sure your security software is up to date at all times. If you don't, you're leaving your business open to attack," he explained.

Lastly, Chris emphasized the importance of employee training and awareness. "It's essential to make sure your employees understand the risks associated with data security, and how to spot potential threats. This can go a long way in preventing data breaches," he said.

"A combination of these measures can help businesses protect their data and reduce the chances of a breach occurring," Chris concluded.

Source

Acer confirms breach after 160GB of data for sale on hacking forum