Cybersecurity近日报道称，德勤英国被勒索软件组织Brain Cipher入侵，该组织声称他们拥有德勤上TB的压缩数据。
德勤的一名发言人对《Cybersecurity》表示：“我们注意到了实施入侵的行为者的说法。”“我们的调查表明，这些指控与德勤网络之外的一个客户系统有关。德勤系统没有受到影响。”
此事在社交媒体引起热议。
有人表示，看来需要有更多的网络安全顾问。有人表示：“1TB？有人偷了 USB 记忆棒吗？”，有人回复称可能是共享点网站的OneDrive。还有网友辣评：“可能全部是PPT文件”。
这是德勤本季度遭遇的第二起黑客事件。2024年9月份，BreachForums的用户IntelBroker表示，他们利用Apache Solr服务器使用默认登录凭证提取了大量内部数据，包括德勤内部网络的电子邮件地址和内部通信。详见《四大某记某地通讯信息泄露，公司回应！》。
原英文报道如下：
Cybersecurity sites have been reporting that Deloitte UK’s been hacked by ransomware group Brain Cipher after the group claimed they’re in possession of a (compressed) terabyte of data from the King’s Green Dot.
The r/consulting reaction to this news is golden:
Let no one claim consultants aren’t funny.
Anyhoo, as expected Deloitte has something to say about this and it’s “nuh uh!”
“We are aware of the claims by the threat actor,” a spokesperson from Deloitte told SecurityWeek. “Our investigation indicates that the allegations relate to a single client’s system which sits outside of the Deloitte network. No Deloitte systems have been impacted.” So it is slides then.
Brain Cipher had this to say about Deloitte’s security:
Reminder that Deloitte calls themselves “market leaders in cyber.”
This is the second hacking incident for the Deloitte brand this quarter, the earlier incident having occurred in September when BreachForums user IntelBroker said they’d exploited an Apache Solr server using default login credentials to extract a large volume of internal data including email addresses and internal communications on Deloitte’s intranet.
In the above instance, Deloitte acknowledged the breach as legitimate but said an investigation “has found no threat to client data or other sensitive data related to this incident.” Probably just a bunch of people bitching about their managers and clients.
四大君重磅推出职场圈子小程序！入圈可实时了解四大圈职场的最新资讯、专业知识经验、政策解读等；在线收听圈内资深人士的职场和专业话题分享；通过与圈内职场经验人士互动解决自身的各种职场疑惑；下载本圈收集的各种数据报告、专业干货等，进行自我学习提升。
点击下方“财融圈”小程序，即可加入我们！
推荐您看看《股权转让税收实战与风险详解：境内与跨境运营》。本书完全以税收实战教学为导向，目标是成为大多数读者能看懂、会使用的股权转让税收规则学习工具。本书从多个维度，从多个重组类型，从多个常见税收实务场景，从境内境外视角，从不同税种，分学习难易阶段，帮助读者逐步提高税收理解层次；由观察过去到展望未来，为读者详细分解我国现行税收政策，并最终以税收实务应用为落脚点，打造全新的股权转让税收实务学习方法体系。
素材来源：www.goingconcern.com/, 由【四大新鲜事儿】综合整理，未经允许不得转载！
