Computer Giant ACER Hacked 2023.

The Taiwanese computer giant Acer has suffered a data breach after threat actors successfully hacked into a server used by repair technicians.

However, the company claims that none of the 160GB of data offered for sale includes any customer data.

Acer Inc. is a Taiwanese multinational hardware and electronics corporation specializing in advanced electronics technology, headquartered in Xizhi, New Taipei City. Its products include desktop PCs, laptop PCs (clamshells, 2-in-1s, convertibles and Chromebooks), tablets, servers, storage devices, virtual reality devices, displays, smartphones and peripherals, as well as gaming PCs and accessories brand. Acer is the world's 5th-largest PC vendor by unit sales as of September 2022.

This data is offered for sale on the hacker forum, claimed to be Raid forums successor, Breached.to, which is protected by the Russian DDoS Guard and running on phpBB.

Sample published online:

As proof the hacker shared some screenshots of technical schematics for the Acer V206HQL display, documents, BIOS definitions and confidential documents.

The criminal also stated that they of course will not accept any other form of payment than Monero, a digital currency that is currently under the scrutiny of the FBI.

This is however not ACERs first data breach, which happened in March 2021, when the REvil ransomware gang hit them and requested a whopping $50,000,000 in exchange for a decryptor, while threatening to leak confidential financial documents.

Then for the second time during 2021, ACER was hit again, but this time an after-sales systems in India had been breached by a hacking group known as Desorden, leaking 60GB of data.

This data from 2021 is now up-for-sale again in March 2023 on a hacker forum by the same threat actor.

This group also hacked into ACERs Taiwan servers.

Leak 2023 details:

• 655 directories and 2869 files.
• Backed infrastructure.
• Binaries for Windows system.
• BIOS.
• Confidential product models documentation for phones, tablets and laptops.
• Presentations and Slides.
• RDPK ( Costs a shit load of money to replace )
• ROM files.
• Staff manuals.
• Windows Imaging format files.
• Windows System Deployment Images ( SDI )

The hacker using the alias "Kernelware" that is selling the dataset, only accepts the transaction using a middleman, most likely to be ( pompom ) a Canadian citizen who is actually running the hacker forum.

Details here.

►ACER Website