WhiteArmor Claims 19 GB Hisense Data Theft, Demands $5 Million

WhiteArmor, a newly emerged data-theft and extortion group, claims it stole 19 GB of data from Hisense and is demanding $5 million in bitcoin. The group listed the Chinese electronics and appliance manufacturer on its dark web leak site, alleging it obtained a GCRM production document store, warranty-claims archives for Malaysia and Singapore, customer personal information, supplier details, and financial and business records. Hisense had not confirmed the breach or commented on the allegations at publication; the group's purported 348 KB sample was inaccessible, preventing independent verification.

WhiteArmor also claims to possess an internal CRM application binary. If authentic, the stolen records would expose warranty customers' personal information, while reverse engineering the binary could potentially support further attacks on warranty-processing systems or fraudulent warranty returns. The reporting establishes an unverified data-theft and extortion claim, not confirmed ransomware encryption. WhiteArmor reportedly first claimed a victim on October 21 and had six victims listed on its leak site, but its reported affiliate model and recruitment claims also remain unverified.