RansomHouse says it breached Trellix and exposes internal systems

A ransomware group known as RansomHouse has taken credit for a recent cyberattack on Trellix, a cybersecurity firm, and has published screenshots as proof of the breach, which allegedly show access to internal Trellix systems¹. The attack is particularly notable as it allowed unauthorized access to a portion of Trellix's source code repository. The breach was initially disclosed by Trellix in early May, at which time the company stated that it had quickly launched an investigation. RansomHouse has added Trellix to its Tor data leak site, further solidifying its claim of responsibility. The fact that a cybersecurity firm like Trellix can be breached in such a way underscores the severity of the threat posed by ransomware groups, so this incident matters to security practitioners because it highlights the need for robust defenses against these types of attacks.