Lapsus$ Rampage

The Lapsus$ cybercriminal gang did a “pretty big bonanza” earlier this year, stealing and leaking data from several big companies. Nvidia, Samsung and T-Mobile were among the first targeted.

Lapsus$ got into some of Microsoft’s network, stealing source code for things like Cortana, and it stole 2.5% of Okta’s customer data. It also attacked Ubisoft and Globant.

“The level of breach they had in each company was slightly different,” Nachreiner said. “In some, they had … access to a ton of data. Lapsus$ basically was able to hack all of these networks … you get ransomware on all of them, and more importantly, they have this underground site, which they’re starting to make more public because … they will actually post samples of all the data they leaked, kind of shaming the company to get the press to notice. And at the end of the day, they potentially encourage the company to pay the ransom in hopes that this data doesn’t leak.”