Loading story…
ASUS disclosed unauthorized access to part of its ASUS eShop environment, potentially exposing customer contact details and order records. The company said payment-card, bank-account, and other financial information were not involved, and it has found no evidence of continuing unauthorized access or misuse of the accessed data.
ASUS said it contained the incident, launched an investigation, and added security measures, but did not disclose the intrusion method, duration, affected regions, number of customers, or suspected actor. Customers were warned that purchase-related data could enable more convincing ASUS-branded phishing emails, SMS messages, phone calls, and online-message impersonation attempts.
See attribution, scope, and your downstream exposure.
1 event from the most recent confirmed update back to the earliest known activity.
ASUS disclosed unauthorized access to part of its eShop environment that may have exposed customer contact details and order records. The company said payment-card, bank-account, and other financial information was not involved, contained the incident, and found no evidence of continuing unauthorized access while its investigation continued.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
tomshardware.com
Open sourcetheregister.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Tenga** disclosed a data breach after an attacker gained unauthorized access to a single employee’s professional email account, allowing visibility into the mailbox contents and enabling outbound spam/phishing to the employee’s contacts, including customers. The exposed information potentially included customer **names, email addresses, and historical email correspondence**, which may have contained **order details** or customer service inquiries; Tenga said a forensic review determined the incident affected **approximately 600 U.S. customers**. Tenga characterized the incident as localized and limited in scope, stating its broader systems and databases outside the U.S. were not impacted and that **no Social Security numbers, payment card data, billing information, or store passwords** were compromised. Post-incident actions described included resetting the affected employee’s credentials and implementing or expanding **multi-factor authentication** across systems; customers were advised to remain vigilant for suspicious emails and consider changing passwords as a precaution, particularly for messages appearing to come from the impacted employee account.
Jun 29, 2026
The Everest ransomware group has publicly claimed responsibility for a significant breach of ASUS, a leading global hardware and electronics manufacturer. According to statements posted on a dark web leak site, Everest alleges it has stolen over 1TB of data from ASUS, including proprietary camera source code, firmware, and potentially other sensitive intellectual property. The group has demanded that ASUS contact them via the encrypted messaging platform Qtox within 21 hours, though no ransom amount has been disclosed. At this time, ASUS has not confirmed or denied the breach, and the exact nature and sensitivity of the compromised data remain unverified. This incident follows a pattern of recent Everest ransomware claims against other high-profile organizations, such as Under Armour, Petrobras, and Iberia airline, which involved theft of user data and internal documentation. If substantiated, the breach would represent a major compromise for ASUS, which previously suffered the ShadowHammer supply chain attack in 2019. The situation underscores the ongoing threat posed by ransomware groups to major technology manufacturers and the potential for large-scale intellectual property theft and operational disruption.
Jun 29, 2026
Lidl disclosed a customer data breach affecting users of its online shop in **Germany, Belgium, and the Netherlands** after attackers compromised an external IT service provider and briefly accessed a separately stored file. The retailer said its online shop systems were **not** breached directly, but the exposed data includes customer names, telephone numbers, email addresses, dates of birth, salutations, and customer numbers. Lidl said it cannot yet rule out exposure of passwords, billing and delivery addresses, bank details, or other payment information, although it has not reported concrete evidence of misuse so far. The service provider has restored system security, filed a police report, and engaged forensic experts, while Lidl notified the relevant data protection authority, including the Dutch regulator, and warned affected customers to watch for phishing attempts and identity fraud.
Jul 18, 2026