Cybersecurity firm Zscaler finds itself under scrutiny as it investigates claims of a potential data breach following reports that hackers offer access to its network for sale. Despite the allegations, Zscaler asserted that there has been no impact or compromise on its customer, production, or corporate environments.
In an official statement, the company emphasized its ongoing investigation and the engagement of a reputable incident response firm to conduct an independent inquiry. “Zscaler continues to investigate and reiterates there is no impact or compromise to our customer, production, and corporate environments,” the statement read.
The controversy emerged when a notorious threat actor, IntelBroker, advertised on Breach Forums the sale of access to “one of the largest cyber security companies,” later identified as Zscaler. IntelBroker offered a package containing confidential logs packed with credentials, SMTP access, PAuth access, SSL passkeys, and certificates for $20,000 in cryptocurrency.
IntelBroker assured potential buyers of the sale’s legitimacy, stating that it would be covered by escrow and restricted to reputable forum members providing proof of funds.
In response, Zscaler disclosed that its investigation revealed an isolated test environment on a single server, devoid of customer data, which was exposed to the internet. Notably, this environment was not hosted on Zscaler infrastructure and lacked connectivity to its operational environments. Nonetheless, the company has taken the test environment offline for forensic analysis.
