2022 Yanluowang ransomware / source code
Data compromised
Source code, Credentials, Employee data
Technical writeup
Attackers linked to Yanluowang ransomware gained access to Cisco's corporate network and stole source code and other files. Cisco stated no customer data was exfiltrated.
Root cause
Compromised employee credentials; attacker maintained access via stolen VPN credentials.