Ransomware – Kompan A/S

562 GB of data was exfiltrated from Kompan A/S, including employee personal data, passports, health information, financial records, partner data, and internal confidential documents. Kompan shut down all servers within 30 minutes of discovering the attack.

CSIS advised that the exfiltrated data had been deleted — but the data later appeared on the dark web. The dataset included information about former employees well beyond GDPR retention limits (up to 9 years after departure).

CSIS

• Version2 — Stor dansk virksomhed hacket
• Version2 — Kompan fik at vide datalæk var usandsynligt
• Version2 — Mere end hundrede pas svømmer rundt på dark web
• BT — Odense virksomhed hacket og afpresset
• BT — Gittes pasoplysninger ligger på dark web
• Computerworld — Sundhedsoplysninger, kreditkort og billeder af børn
• Version2 — Medarbejderdata lækket 9 år efter opsigelse