Dragos says it has found no evidence of a data breach after a known ransomware group claimed to have hacked the industrial cybersecurity companyâ€™s systems through a third party.
â€œDragos is asked to reach out within 24 hours, or we will begin the publication of both the facts and the data of executive members. This is the result of a third-party breach,â€ the cybercrime group known as BlackCat and Alphv wrote on its leak website in a post dated November 11.Â
Dragos has launched an investigation, but there is no evidence to date that the hackersâ€™ allegations are true.
â€œWe are aware of an unsubstantiated claim of a breach of information about Dragos executives purportedly from a third-party compromise,â€ Dragos said in a statement to SecurityWeek. â€œWhile security companies like Dragos are often the subject of repeated false claims, we take the responsibility to protect data very seriously and immediately began an investigation into the claims, utilizing our own internal experts and our external security providers.â€
â€œWe have not been contacted directly by the criminals and our investigation to date has not produced evidence of a compromise of Dragos systems. We will continue to investigate and monitor this situation,â€ the company clarified.
This is not the first time a ransomware group has made apparently false claims against Dragos. In October, the threat actor behind the RansomedVC operation, which recently announced closing shop, made contradictory and highly confusing claims about hacking Accenture, Colonial Pipeline and Dragos. At the time, the industrial cybersecurity firm described their claims as â€œobviously falseâ€.
Dragos did confirm in May that a ransomware group had breached its defenses and accessed threat intelligence reports, a SharePoint portal, and a customer support system.
However, the company said the data breach was limited and an elaborate extortion scheme that included private messages being sent to company executives failed.
Related: ICS Security Firm Dragos Raises $74 Million in Series D Extension
Related: New Dragos OT-CERT Provides Free Industrial Cybersecurity Resources