Synopsys denies data breach claims by new ransomware group D1R

Silicon design firm Synopsys has stated it has found no evidence of a data breach following claims by a new ransomware group, D1R, that it hacked Synopsys systems and accessed data belonging to its major customer, Bosch. The group listed both companies on its Tor-based leak site, alleging exploitation of a vulnerability in Synopsys' website to access a corporate client database, according to Security Week.

The ransomware group D1R claimed to have accessed a database of 40,000 entries from Synopsys and subsequently used this information to target Bosch, alleging the theft of valuable intellectual property. Synopsys, a provider of electronic design automation software and semiconductor blueprints, has conducted an investigation and found no evidence to support these claims. The company stated that it has not been contacted by the threat actor and considers the allegations of unauthorized access to customer data to be unfounded.

A screenshot provided by the hackers as proof of access to Bosch data appears to be from a publicly available user manual. Bosch, a global engineering and technology company, provided a general statement emphasizing its commitment to cybersecurity and its continuous efforts to strengthen digital system protection. This incident highlights the common tactic of cybercriminals exaggerating or fabricating data breaches to extort victims.

Source: Security Week