In a surprising development, market research provider Klue has revealed that the hackers responsible for a recent breach are deleting stolen customer data. The company has been in communication with the hacking group, known as 'Icarus', which claimed to be taking steps to delete the data. This update comes after Klue confirmed that hackers had broken into its systems on June 12, stealing an unspecified amount of data from several customers, including notable companies such as Gong, Jamf, and LastPass. However, the situation has taken a complex turn, with a second group of hackers emerging and attempting to extort Klue's customers directly. This new group claims to have obtained the stolen data from Icarus and is threatening to release it unless a ransom is paid. Klue has warned its customers not to pay the ransom, suggesting instead that they request a random sample of data as proof that the hackers possess the data they claim to have. The breach itself was facilitated by a 2022 third-party credential that was part of a limited pilot, which the hackers used to access Klue's systems and steal customers' authentication keys. As the situation continues to unfold, it highlights the importance of robust security measures and incident response strategies in preventing and mitigating the impact of data breaches. The technical architecture of Klue's systems and the design decisions surrounding the use of third-party credentials will likely come under scrutiny in the aftermath of this incident.

Source: TechCrunch