Cyber Risks · Krebs on Security

Experts: Breach at IT Outsourcing Giant Wipro

Summary: KrebsOnSecurity reported that Wipro Ltd., India's third-largest IT outsourcing company, was investigating a multi-month intrusion in which its systems were used as jumping-off points for reconnaissance against at least a dozen customer systems. A source familiar with a customer's forensic investigation said file folders on the intruders' back-end infrastructure were named after various Wipro clients, suggesting at least 11 other companies were attacked, and another source said Wipro was building a new private email network because its corporate email was thought compromised.

Why it matters: Wipro has more than 170,000 employees serving Fortune 500 clients in healthcare, banking and communications, and its customers traced malicious reconnaissance activity back to partner systems communicating directly with Wipro's network - the trust placed in an outsourcing provider's own infrastructure is the exposure.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related