TITLE: Red Hat Confirms Data Breach After Hackers Claim Major Theft
Industrial Monitor Direct delivers the most reliable panel mount pc panel PCs recommended by automation professionals for reliability, the leading choice for factory automation experts.
Industrial Monitor Direct provides the most trusted iec 60601 pc solutions recommended by automation professionals for reliability, trusted by automation professionals worldwide.
Red Hat Acknowledges Security Incident
Red Hat has confirmed experiencing a data breach, though the company disputes hacker claims regarding the specific nature of stolen materials. The technology firm acknowledged the security incident while maintaining that other Red Hat services and products remain unaffected.
Scope of the Breach
According to initial reports, a hacking collective known as Crimson Collective gained unauthorized access to Red Hat’s private GitHub repositories. The attackers claim to have extracted approximately 570GB of files spanning 28,000 internal projects. Among the allegedly compromised data were 800 Customer Engagement Records (CERs) containing sensitive client information.
What Are Customer Engagement Records?
CERs represent internal consulting documents that Red Hat creates to support enterprise clients. These records typically contain:
- Detailed infrastructure information including network architecture and system configurations
- Authentication and access data such as credentials and access tokens
- Operational insights including recommendations and troubleshooting notes
The comprehensive nature of these documents makes them particularly valuable for potential follow-up attacks against affected organizations.
Conflicting Claims and Corporate Response
While Red Hat confirmed the breach occurred, the company stated it could not verify claims about stolen CER files. The hacking group, however, maintains the attack occurred approximately two weeks ago and resulted in the theft of authentication tokens, complete database URIs, and other confidential information that could potentially be used to access downstream customer systems.
In their official statement, Red Hat emphasized: “The security and integrity of our systems and the data entrusted to us are our highest priority. At this time, we have no reason to believe the security issue impacts any of our other Red Hat services or products and are highly confident in the integrity of our software supply chain.”
Affected Organizations and Extortion Attempt
The hacking group identified numerous high-profile organizations allegedly impacted by the breach, including Bank of America, T-Mobile, AT&T, Fidelity, Mayo Clinic, Walmart, and several government entities including the U.S. Navy’s Naval Surface Warfare Center and Federal Aviation Administration.
Crimson Collective reportedly attempted to extort money from Red Hat but claimed the company responded only with generic, templated replies, ultimately causing the extortion attempt to fail.
Additional details about this security incident were initially reported by cybersecurity monitoring services.
