HTC Global Services confirms cyberattack after ALPHV leaks stolen files
- Organization
- HTC Global Services
- Exploit
- Ransomware
- Industry
- IT Services
HTC Global Services, a managed services provider that supplies technology and business consulting to healthcare, automotive, manufacturing and financial sector clients, confirmed in early December 2023 that it had suffered a cyberattack.
The acknowledgement followed the ALPHV/BlackCat ransomware group adding HTC to its dark web leak site and publishing screenshots of material it said it had taken. The samples included scans of passports, contact lists, emails and confidential internal documents. Rather than issuing a statement on its website, HTC confirmed the incident in a short post on X saying it had experienced a cybersecurity incident and that its team was investigating and working to protect the security and integrity of user data.
Security researcher Kevin Beaumont reported that HTC's CareTech business unit had been running a Citrix NetScaler appliance vulnerable to the flaw known as Citrix Bleed, and said he believed that was how the attackers obtained initial access. HTC neither confirmed nor denied the entry point and did not answer press questions about whether Citrix Bleed was involved.
As of mid-December 2023 the company had not said what data had been taken, how many people were affected, or whether any systems had been encrypted. Its investigation remained open.