Dutch Chipmaker Nexperia Scrambles After Data Leak by Dark Angels Ransomware Group

Dutch chipmaker Nexperia became the latest victim of a cyberattack after the Dark Angels ransomware gang leaked a sample of allegedly stolen data on their leak site, Dunghill Leak. The attack, which occurred in March 2024, forced Nexperia to shut down critical IT systems and launch a comprehensive investigation.

Nexperia, a subsidiary of the Chinese tech giant Wingtech Technology, is a major player in the semiconductor industry. The company, headquartered in Nijmegen, Netherlands, boasts a workforce of 15,000 specialists and operates fabrication plants in Germany and the UK. These facilities produce a staggering 100 billion units annually, including transistors, diodes, and other essential electronic components.

The exact nature and scope of the data breach remain unclear. However, Nexperia acknowledged in a press release that unauthorized actors gained access to a portion of their IT servers. The company emphasized its swift response, which included isolating the affected systems to contain the incident and implementing security measures to prevent further breaches. Additionally, Nexperia has enlisted the help of cybersecurity experts to assess the attack’s impact and strengthen their overall security posture.

The Dark Angels, a notorious ransomware group known for high-profile attacks, claimed responsibility for the Nexperia breach. The group typically encrypts a victim’s data and demands a hefty ransom for decryption. However, it’s uncertain whether Nexperia received such a ransom demand or if the company paid any ransom.

The leak of stolen data by the Dark Angels raises concerns about the potential consequences for Nexperia. The compromised information could include sensitive business documents, intellectual property, or even employee or client data. A data breach of this nature could disrupt Nexperia’s operations, damage its reputation, and potentially lead to regulatory fines.

The incident highlights the growing threat posed by cyberattacks to the semiconductor industry. Chipmakers are increasingly targeted due to their vital role in the global supply chain and the valuable intellectual property they possess. Nexperia’s breach serves as a stark reminder for all companies in the sector to invest in robust cybersecurity defenses and incident response protocols.