[Updated] Ring allegedly victim of data breach by ALPHV ransomware group

Here’s the crux of the article in video form

New updates are being added at the bottom of this story…….

Original story (published on March 14, 2023) follows:

In the ‘Home Security’ segment, Ring is one of the most well-known names. The company offers a wide catalog of products that include cameras, video doorbells, alarms, and more.

Their products also benefit from advanced software features through the dedicated app. That said, we recently covered that these features will become paid for new customers soon.

Now, certain rumors have emerged that point to a possible data breach in the Ring servers by the ALPHV ransomware group.

Alleged data breach on Ring servers by ALPHV ransomware group

It’s worth pointing out that there is still no official confirmation of the possible hack. However, the information comes from some cybersecurity experts.

According to reports, Ring has been the victim of a ransomware attack, and the people responsible could be the ALPHV group.

Apparently, the hackers could be threatening the company to leak all its private data if they don’t reach an agreement (1, 2, 3, 4).

Ring LLC, the home security and smart home company owned by Amazon, has been ransomed by ALPHV ransomware group. They left a simple message to Ring: “There’s always the option to let us leak your data”.
Source

👀👀👀 Wowee #ring security from #Amazon has been posted by #ALPHV as an alleged victim. #cybersecurity #infosec #ransomware
Source

How could this affect Ring users? Basically, if the data breach is confirmed and the company does not reach an agreement with the hackers, their data stored on the Ring servers will be publicly leaked on the internet.

This can include sensitive data such as credit card numbers, mailing addresses, phone numbers, names, passwords and more.

ALPHV ransomware group becoming more dangerous since last year

‘ALPHV’ ransomware is also known in the cyber security world as ‘BlackCat’ or ‘Noberus’. The Russian-born ‘tool’ seems to be gaining more fame and danger since last year (2022).

In 2022, the company focused its attacks on services related to fuel logistics and transportation services operators. But, if the data breach is confirmed, Ring would be its ‘biggest fish’ so far.

For those who don’t know, Ring is a company owned by Amazon. So, the ‘ALPHV’ ransomware team could have managed to successfully attack one of the divisions of the internet and e-commerce giant.

There is still no official word on this situation from either Ring or Amazon teams. We will update this story as events unfold in the future.

03:47 pm (IST): According to a report, a link to an article related to the breach was shared on Amazon’s Slack channel with an instruction saying:

Do not discuss anything about this. The right security teams are engaged.
Source

This shows that Amazon is indeed investigating the possible breach and is aware of it.

06:37 pm (IST): According to a source on Twitter, Ring has outrightly denied being an ALPHV victim. It has, in fact, told several media sites that they think there has been a data breach with a third-party vendor.

Ring denies being a victim of ALPHV. Ring has stated to various media outlets they believe a 3rd party vendor has suffered a data breach.
Source

05:34 pm (IST): In a statement shared with Vice, Ring representatives claimed that the alleged third-party vendor affected by the ransomware does not have access to customer data.

PiunikaWeb started as purely an investigative tech journalism website with main focus on ‘breaking’ or ‘exclusive’ news. In no time, our stories got picked up by the likes of Forbes, Foxnews, Gizmodo, TechCrunch, Engadget, The Verge, Macrumors, and many others. Want to know more about us? Head here.