Security Blueprints of Many Companies Leaked in Hack of Swedish Firm Gunnebo
Summary: Hackers broke into Swedish physical security firm Gunnebo Group's network and published at least 38,000 stolen documents online in the second half of September, including schematics of client bank vaults and surveillance systems. KrebsOnSecurity had alerted Gunnebo in March 2020 to a transaction selling credentials to an RDP account whose password was "password01," and in August the company said it thwarted a ransomware attack with minimal lasting impact.
Why it matters: Gunnebo supplies physical security to banks, government agencies, airports, casinos, and nuclear power plants across 25 countries, and its CEO publicly downplayed the exposure of drawings that describe how those defenses are built. The initial foothold was an RDP account protected by "password01" - a reminder that the credential, not the adversary's sophistication, is often what decides whether your blueprints end up on a public server.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026