- Maxar notifies California Attorney General of data breach
- It says sensitive employee data was stolen in the attack
- The attacker used a Hong Kong address to breach the systems
Maxar Space Systems has reported suffering a data breach in which it lost sensitive employee data.
Confirming the breach in a filing with the California Attorney General, as well as in a breach notification letter sent to affected individuals, the company revealed an unidentified threat actor accessed its systems early in October 2024.
The hacker, who allegedly used a Hong Kong-based IP address for the intrusion, lurked for a week, exfiltrating sensitive data, before being spotted on October 11, and quickly ousted.
Hidden Risk
Before being expelled, the crooks managed to steal sensitive information on a yet undisclosed number of Maxar employees, including people’s names, postal addresses, Social Security Number (SSN), business contact information (business phone, location, business email, and other data), gender, employment status, employee number, job title, hire date, role start date, and in some cases – termination date, supervisor, and department information.
This is more than enough information to run all kinds of cyberattacks, from phishing, to identity theft, and possibly even ransomware and wire fraud. Luckily, bank account information and birth dates were not exposed.
Maxar said it notified the police, and offered both current and former employees a year’s worth of identity theft protection and credit monitoring via IDShield and IDX. “We strongly encourage you to report incidents of suspected identity theft to law enforcement,” the company added.
The affected company is a division of Maxar Technologies, specializing in the design, manufacturing, and integration of advanced satellite systems and space-based solutions for commercial and governmental applications.
It has roughly 2,600 employees, with more than half having US security clearances, meaning they can work on US government contracts.
Maxar Technologies, on the other hand, is a major space technology and intelligence company that provides geospatial data, satellite imagery, and advanced analytics to support industries such as defense, intelligence, and commercial sectors. This sector was not breached.
Via TechCrunch