CrowdStrike fires ‘suspicious insider’ who handed data to hackers

Cybersecurity big CrowdStrike has confirmed firing a “suspicious insider” final month who allegedly fed details about the corporate to a infamous hacking group.

A hacking collective often called Scattered Lapsus$ Hunters printed screenshots late Thursday and Friday morning in a public Telegram channel that allegedly confirmed insider entry to CrowdStrike programs. The screenshots, which information.killnetswitch has seen, present dashboards containing hyperlinks to firm sources, together with a consumer’s Okta dashboard utilized by workers for accessing inside apps.

The hackers claimed within the Telegram channel to have compromised CrowdStrike via a current breach at Gainsight, a buyer relationship administration firm that helps Salesforce clients monitor and handle their very own clients’ knowledge. The hackers mentioned they used data stolen from Gainsight to interrupt into CrowdStrike.

However CrowdStrike says the hackers’ claims are “false,” and says it terminated the insider’s entry after the corporate “decided he shared photos of his laptop display screen externally.”

“Our programs had been by no means compromised and clients remained protected all through. Now we have turned the case over to related regulation enforcement companies,” CrowdStrike spokesperson Kevin Benacci advised information.killnetswitch.

A number of different tech firms had been allegedly hacked as a part of the identical marketing campaign. Gainsight didn’t reply to information.killnetswitch’s requests for remark.

Scattered Lapsus$ Hunters is a collective of hackers made up of a number of hacking teams, notably ShinyHunters, Scattered Spider, and Lapsus$. The group’s members use social engineering methods to trick workers into granting them entry to their programs or databases. 

In October, Scattered Lapsus$ Hunters claimed to have stolen greater than 1 billion information from company giants who depend on Salesforce to host their buyer knowledge. The hackers printed an information leak web site itemizing knowledge stolen from firms, together with insurance coverage big Allianz Life, the airline Qantas, carmaker Stellantis, credit score bureau TransUnion, the worker administration platform Workday, and others.