CrowdStrike fires ‘suspicious insider’ who handed data to hackers

Cybersecurity large CrowdStrike has confirmed firing a “suspicious insider” final month who allegedly fed details about the corporate to a infamous hacking group.

A hacking collective referred to as Scattered Lapsus$ Hunters printed screenshots late Thursday and Friday morning in a public Telegram channel that allegedly confirmed insider entry to CrowdStrike methods. The screenshots, which TechCrunch has seen, present dashboards containing hyperlinks to firm assets, together with a person’s Okta dashboard utilized by staff for accessing inner apps.

The hackers claimed within the Telegram channel to have compromised CrowdStrike via a current breach at Gainsight, a buyer relationship administration firm that helps Salesforce clients observe and handle their very own clients’ information. The hackers stated they used data stolen from Gainsight to interrupt into CrowdStrike.

However CrowdStrike says the hackers’ claims are “false,” and says it terminated the insider’s entry after the corporate “decided he shared footage of his pc display externally.”

“Our methods had been by no means compromised and clients remained protected all through. We have now turned the case over to related regulation enforcement businesses,” CrowdStrike spokesperson Kevin Benacci instructed TechCrunch.

A number of different tech corporations had been allegedly hacked as a part of the identical marketing campaign. Gainsight didn’t reply to TechCrunch’s requests for remark.

Scattered Lapsus$ Hunters is a collective of hackers made up of a number of hacking teams, notably ShinyHunters, Scattered Spider, and Lapsus$. The group’s members use social engineering methods to trick staff into granting them entry to their methods or databases. 

In October, Scattered Lapsus$ Hunters claimed to have stolen greater than 1 billion data from company giants who depend on Salesforce to host their buyer information. The hackers printed a knowledge leak web site itemizing information stolen from corporations, together with insurance coverage large Allianz Life, the airline Qantas, carmaker Stellantis, credit score bureau TransUnion, the worker administration platform Workday, and others.