Lapsus$’s vacation was short-lived: the cybercriminal group announced Wednesday, March 30 having obtained the data of the company Globant, specialized in software development.
On their Telegram channel, the members of the group thus broadcast a first announcement accompanied by a screenshot to prove their statements, before broadcasting an archive of 70 GB of internal data stolen from their victim.
A “limited” intrusion according to Globant
Globant also issued a statement acknowledging an intrusion that affected “a limited section of our corporate code repository.”
According to the company, the attackers managed to access source code and documentation developed on behalf of a “limited” number of customers. Among the names visible on the screenshots released by the group, we find Abbott, BNP Paribas Cardif, DHL, or even Facebook.
Globant indicates that it has not yet found any other traces of intrusion in the rest of its systems. The analysis is continuing and Globant specifies that it has taken measures to limit the risk of future attacks.
A highly sought after group
With this announcement, the group Lapsus$ shows that it is continuing its activity despite the announcement of several arrests made last week by the British police. The group attracted a lot of media attention after announcing the hacking of several large companies in the new technology sector, including Okta, Microsoft, Samsung or Nvidia. A resounding style that today earned him honors from the FBI: the American federal police have placed the group on its list of most wanted cybercriminals and launched a call for testimonies for all those with information on the group.
Last week, the British police announced seven arrests in connection “with a cybercriminal group”, without specifying whether these arrests had a direct link with Lapsus$.
The leaking of the identity of one of the group’s members online in January had also prompted many researchers and journalists to track down Lapsus$ members, and the announcement by the British police suggested that the arrests concerned group members. But the resumption of the group’s publications on the Telegram channel shows that Lapsus$ is continuing its activities.