Trio-Tech’s Singapore subsidiary hit by ransomware attack, stolen data published online
Summary
Trio-Tech International, a semiconductor services firm, disclosed a ransomware attack on its Singapore subsidiary that occurred on March 11th. Initially, the company assessed the breach as non-material, but this changed when the threat actors, identified as the Gunra ransomware group, published stolen data on the dark web. The subsidiary took systems offline and engaged cybersecurity professionals and law enforcement. The incident highlights a pattern of companies underestimating the impact of breaches until data is leaked. While Trio-Tech is a small-cap company, the attack underscores the vulnerability of smaller firms within the semiconductor supply chain, which often lack robust cybersecurity measures but possess sensitive data. The financial implications for Trio-Tech include potential regulatory fines and remediation costs, and the incident serves as a warning about ongoing cybersecurity risks within the sector.
(Source:Crypto Briefing)