アーカイブ — US — techcrunch
Government hackers breached telecom giant Ribbon for months before gettingcaught
Ribbon, a U.S. telecom giant, disclosed that government-backed hackers accessed its network for nearly a year, starting in December 2024, affecting several customers. Although Ribbon believes the hackers are no longer in its system, uncertainty remains about data exfiltration. This incident follows a trend of telecom breaches attributed to state-sponsored groups, notably linked to Chinese hackers targeting U.S. infrastructure.
要点
- Ribbon confirmed a breach lasting nearly a year by suspected nation-state hackers, starting December 2024.
- The company disclosed the breach via a 10-Q filing with the SEC, indicating it notified law enforcement.
- Several customer files on two laptops were accessed, though it remains unclear what sensitive data, if any, was stolen.
- Affected customers include Fortune 500 firms and government agencies like the Department of Defense.
- This breach is part of a broader pattern of attacks on telecom providers, many linked to Chinese-backed hackers targeting U.S. companies.
なぜ重要か
- The incident aligns with ongoing cybersecurity threats where telecom providers have faced numerous breaches over the past two years.
- Historical context includes previous attacks on U.S. companies by Chinese-backed hackers, indicating a sustained effort to undermine U.S. infrastructure ahead of geopolitical tensions.
- The attack on Ribbon could be part of a broader strategy connected to the anticipated geopolitical conflicts, specifically relating to Taiwan.
The Ribbon breach highlights a worrying trend of sustained cyberattacks on U.S. telecommunications by state-sponsored groups, emphasizing the need for enhanced cybersecurity measures in critical infrastructure sectors.