Brokk purportedly hacked by Play ransomware, data leaked

Brokk, a leading Swedish global remote-controlled demolition machinery manufacturer, had a 4 GB dataset allegedly stolen from its systems exposed by the Russia-linked Play ransomware operation, which threatened to leak all pilfered data should it refuse to fulfill the demanded ransom, reports Cybernews.

Included in the data trove purportedly exfiltrated by Play were internal corporate information, including financial details, budgets, payroll, IDs, taxes, and client files. While the legitimacy of Play's assertions has not been verified so far, such a leak was noted by Cybernews researchers to potentially cause reputational damage to Brokk.

"On top of that, you face the classic fallout of exposed PII. Leaked employee data increases the risk of targeted scams and a long tail of security and compliance issues that can take years to fully clean up," researchers added. More than 1,100 organizations have already been claimed to be compromised by Play since its emergence three years ago, with Jamco Aerospace and ADC Aerospace among its most recent victims.