CONVERGE ICT HIT BY ALLEGED DATA BREACH; NEW CLAIMS LINK INCIDENT TO GLOBE INFRASTRUCTURE
Converge ICT is facing an alleged data breach involving customer, product, and transaction-related information, with new information from threat actor, 4HMDOS4 now suggesting a possible connection between the Converge incident and a previously reported breach involving Globe Telecom.
The Converge incident is being reported as a separate breach case based on newly surfaced data attributed to 4HMDOS4. The data provided appears to contain records associated with customer accounts, products, transactions, and distribution channels.
Among the fields observed are account numbers, serial numbers, subscriber information, geographic details, SKU and product information, transaction amounts, discounts, wallet-related fields, dealer and retailer information, distributor details, and transaction reference identifiers.
https://iili.io/naqLyXa.png
https://iili.io/naqQ2gp.png
Some records contain transaction dates from September 30, 2023, including entries referencing Converge-related services such as prepaid fiber and Converge S2S.
While the Converge breach is being reported independently, information subsequently provided by 4HMDOS4 has introduced a possible connection between the Converge and Globe cases.
The threat actor claimed that its access extended across infrastructure associated with both Converge and Globe, citing their relationship as part of the basis for the access.
The actor also claimed access to additional hostnames associated with other infrastructure and government facilities, including systems reportedly related to airport Wi-Fi infrastructure, and many more.
These statements remain claims by the threat actor and have not independently established that Globe, airport infrastructure, government facilities, or other referenced systems were compromised.
The newly surfaced Converge data appears to contain information relating to customers and commercial transactions, including:
- Subscriber and account records
- Product and SKU information
- Serial numbers
- Subscriber geographic information
- Transaction amounts and discounts
- Wallet and payment-related fields
- Dealer and retailer information
- Distributor information
- Transaction references and identifiers
DWK will continue monitoring activity associated with 4HMDOS4 and will provide further updates as additional information can be independently assessed and validated.
