Maze ransomware hits insurance giant Chubb

Cybersecurity insurance provider suffered a data-stealing ransomware attack

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

The Switzerland-basedcybersecurity insuranceprovider Chubb, which helps businesses deal with data breaches, has revealed that is has fallen victim to a data breach itself.

The insurance giant is currently investigating a “security incident” that involves unauthorized access to data belonging to an unnamed third party.

Chubb spokesperson Jeffrey Zack toldTechCrunchthat the company had “no evidence” that the incident affected its own network which “remains fully operational”.

However, Zack did not comment further on the matter to the news outlet nor did he say if any of Chubb’s customers were affected by the incident.

Maze ransomware

Maze ransomware

TechCrunchfirst learned of the breach from Brett Callow who works as a threat analyst at the security firmEmsisoft. According to Callow, the security incident was the result of a data-stealing ransomware attack launched by the Maze ransomware group.

TheMaze ransomwarecan be particularly damaging to businesses as it not only spreads across a network infecting and encrypting every computer connected to it but the ransomware also exfiltrates the data contained on those machines and sends it back to the attackers' servers. The data is then held for ransom and if an organization decides not to pay, the attackers publish all of the files Maze has obtained online.

Callow also revealed that the attackers behind Chubb’s security incident posted a listing on their website in which they claimed to have stolen data from the company in March. This listing appears to be legitimate as it includes the names and email addresses of three of the company’s senior executives, including its CEO Evan Greenberg.

Are you a pro? Subscribe to our newsletter

Are you a pro? Subscribe to our newsletter

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

As of now, the Maze ransomware group has not yet published any of the files they’ve stolen from Chubb but this could change if the company decides not to pay the ransom.

ViaTechCrunch

After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.

Cisco issues patch to fix serious flaw allowing possible industrial systems takeover

Washington state court systems taken offline following cyberattack

Google TV will require more RAM for future upgrades – which might leave older TVs and streaming boxes behind