Iron Mountain reports limited impact from Everest gang breach

Data storage and recovery services company Iron Mountain has stated that a recent data breach claimed by the Everest extortion gang was confined to marketing materials. The company, founded in 1951 and serving over 240,000 customers globally, including 95% of the Fortune 1000, confirmed the limited scope of the incident, according to a recent report by Bleeping Computer.

The Everest gang claimed to have stolen 1.4 terabytes of internal documents and client information. However, Iron Mountain clarified that the attackers gained access to a single folder on a file-sharing server using compromised credentials. This folder contained primarily marketing materials shared with third-party vendors. The company emphasized that no customer confidential or sensitive information was accessed, and no ransomware or malware was deployed. No other Iron Mountain systems were affected by this incident.

Source: Bleeping Computer