Dustin breach may expose customers to future attacks

Dustin says the hacker group FulcrumSec has begun publishing data from its breach of the IT reseller. FulcrumSec claims it holds 6.2 terabytes of data and that the first release was about 430 gigabytes before compression. The list reportedly includes source code, more than one million account records, internal cases and nine security assessments of named customers.

Techtidningen has not verified the material’s authenticity, scope or FulcrumSec’s claim that Dustin did not pay. Dan Bergh Johnsson of Omegapoint said the main concern is the spread of the data, not its volume. He said combined information about customer equipment, locations, service work, contacts and technical environments could help attackers plan phishing or identify known vulnerabilities.

The listed material includes cases and documentation from Jira and Confluence, customer identities from Skyportal, CRM data and an internal user directory. Dustin first accepted orders by phone and email after a delivery stoppage. On 10 September, the company said its online stores and ordering portals were functioning normally again, while recovery and a forensic investigation continued.

Dustin says it made an initial report to Integritetsskyddsmyndigheten (IMY) about a potential personal-data incident. It cannot rule out unauthorised access to personal data in Skyportal, including account names, contact details and usage logs. The company says it has no indication that the data likely creates a high risk to individuals, though that assessment may change as the investigation continues.