- FireEye (2020): In one of the most high-profile breaches, this top-tier firm was targeted by a highly sophisticated state-sponsored actor (widely believed to be Russian). The attackers stole “Red Team” tools—software FireEye uses to mimic hackers when testing their clients’ defenses.
- SolarWinds (2020): While primarily an IT management company, its Orion software is used by security teams worldwide. A massive supply chain attack allowed hackers to insert malicious code into software updates, compromising thousands of organisations, including U.S. government agencies and other security firms like FireEye.
- Okta (2022 & 2023): This identity management leader has faced multiple incidents. In 2022, the Lapsus$ hacking group breached a third-party support provider, gaining access to some customer data. In 2023, they suffered another breach of their support case management system, which allowed hackers to view files uploaded by customers.
- LastPass (2022): The password manager firm suffered a significant breach where attackers stole cloud-based backups of customer vault data. This was particularly damaging as it required a multi-stage attack starting from an employee’s personal computer.
- Kaspersky Lab (2015): The Moscow-based firm discovered it had been targeted by “Duqu 2.0,” a highly advanced malware likely created by a nation-state to spy on its research and technologies.
- RSA Security (2011): Hackers stole information related to SecurID two-factor authentication tokens. This breach was significant because it potentially compromised the security of every RSA customer using those tokens at the time.
- Trend Micro (2008): A Turkish hacker successfully defaced the Trend Micro website, demonstrating that even antivirus giants can fall victim to web-based attacks.
Notable Cybersecurity Firms That Have Been Hacked
Comments Off on Notable Cybersecurity Firms That Have Been Hacked
Filed under Uncategorized
