Hackers have stolen numerous terabytes of company and personnel data from controversial Brazilian multi-national Andrade Gutierrez, in a raid the firm reportedly still has not acknowledged.
The Belo Horizonte-headquartered huge is one of the premier engineering companies in Latin The us, liable for major assignments in infrastructure, electricity, oil and fuel, and transportation throughout the location.
Even so, a hacking group known as the “Dark Angels” statements to have stolen 3TB of e-mail and corporate information – which includes names, email addresses, passport facts, payment info, tax ID quantities and wellbeing insurance information on more than 10,000 workers, according to The Brazilian Report.
Hidden in many email messages are passwords that could be applied to log-in to municipal and condition tax authority accounts, the report alleged. Also among the the trove are blueprints to various significant-title design tasks completed by Andrade Gutierrez, like ports, airports and a number of facilities utilized in the 2014 World Cup and 2016 Olympic Games held in Brazil, the report continued.
Infosecurity has not been capable to confirm the validity of the 15GB dataset shared by the hackers with The Brazilian Report.
However, the breach itself is stated to have occurred in September–October past 12 months and was accomplished by way of exploitation of a server vulnerability, which is reportedly still unpatched today.
The multibillion-greenback earnings firm, which employs more than 200,000 employees worldwide, is no stranger to controversy. In 2018 it agreed to fork out $381m to settle graft rates involved with the “Lava Jato” scandal, which led to the prosecution of previous and recent Brazilian president, Luiz Inácio Lula da Silva.
Infosecurity has asked Andrade Gutierrez for comment on the report and will update this tale if we listen to back again.
Some parts of this article are sourced from:
www.infosecurity-journal.com