DisclosureLens
GLOBALUnknownRansomwareBlackbyteLow

Alps Alpine

bd_add012b78e01db19 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 6, 2023

To disclose

—

Affected

Not disclosed

Linked

2 records

Confidence

60%
Full breach record for Alps Alpine →

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

Cyberattacks on Our Group Companies. Alps Alpine: On July 6, 2023, Alps Alpine detected unauthorized access to certain servers managed by the group. To minimize damage, the group immediately isolated the attacked servers from the network. However, an investigation revealed that personal information, such as the names and email addresses of approximately 16,000 Alps Alpine and group company employees, was disclosed, but no customer information leak was found. Linked ransomware group: blackbyte.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Jul 6, 2023

Press report

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

—

Compliance clock

Not assessable

This press report is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

If an SEC 8-K, state-AG notice or victim statement lands, DisclosureLens merges it into an incident and links it here.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2021-10-04

blackbyte

According to ransomware.live, Ransomware. Uses dropper written in JavaScript to deploy a .NET payload.

147 victims claimed globally147 tracked hereFull profile →