
"Insight Partners informed the public in mid-February that it had been targeted in a cyberattack. The attack was detected on January 16 and the attacker was kicked out on the same day, but the company admitted that sensitive data may have been stolen. Indeed the VC firm confirmed in May that personal, financial, and other information pertaining to employees and partners had been compromised."
"Insight Partners recently started sending out data breach notifications to impacted individuals. The Maine Attorney General's Office (AGO) has received a copy of the notification, which reveals that the attackers gained access to the company's systems on or around October 25, 2024, and the intrusion was detected on January 16 because that was when the hackers started encrypting files on the compromised servers."
"This is the first time Insight Partners has confirmed that ransomware was involved in the incident. The notifications also show that the attackers used "sophisticated social engineering" to gain access to its servers in October 2024. It appears the hackers had ample time to exfiltrate information from the VC firm's systems. The Maine AGO has been informed that the data breach impacts more than 12,000 individuals, who are being offered free identity theft protection services."
Insight Partners detected a ransomware intrusion on January 16 after attackers began encrypting files, although initial access occurred around October 25, 2024. Attackers used "sophisticated social engineering" to gain access and had time to exfiltrate personal, financial, and partner information. The firm confirmed that employee and partner data had been compromised and notified impacted individuals, informing that over 12,000 people are affected and eligible for free identity theft protection services. No known ransomware gang has posted the firm on leak sites, which could suggest a ransom payment. Insight Partners manages over $90 billion and has invested in hundreds of companies, including major cybersecurity firms.
Read at SecurityWeek
Unable to calculate read time
Collection
[
|
...
]