An Israeli-based company Cellebrite that manufactures data extraction, transfer and analysis devices for cellular phones and mobile devices, has 900GB worth of data hacked and stolen by hackers.
The data includes customer credentials, databases, logs from Cellebrite devices, evidence files from seized mobile devices and an immense amount of technical data describing the company's products.
The attackers have then provided the publication with a copy of the stolen information to Motherboard and a selected few in IRC chat rooms.
According to the report, the information appears to have been stolen from the customer section of Cellebrite’s website, where users can access new software updates.
The company has confirmed the breach on its website, advising customers to change their password.
"Presently, it is known that the information accessed includes basic contact information of users registered for alerts or notifications on Cellebrite products and hashed passwords for users who have not yet migrated to the new system. To date, the company is not aware of any specific increased risk to customers as a result of this incident; however, my.Cellebrite account holders are advised to change their passwords as a precaution."
Cellebrite is a pay-for-hire mobile hacking agency known for selling surveillance and data extraction solutions to intelligence and law enforcement. One of its bestselling product is the portable Universal Forensic Extraction Device (UFED) which has the ability to extract data from a wide variety of smartphones as long as the UFED-user is in possession of the handset. Once plugged in, the device can pull data like SMS messages, emails and call logs.
It has purportedly been supplying a number of U.S. government agencies as well as Russia, the United Arab Emirates and Turkey.