2025 Colt Technology Services — Warlock ransomware/data-exfil claims; prolonged support-system outages (Aug)
Data compromised
Mix of corporate finance/HR-style documents and customer-contract artifacts described in press and gang marketing—specific validated inventory pending
Technical writeup
European telecommunications provider Colt Technology Services began publicly communicating a major cyber incident on August 12, 2025, initially framed as broad service degradation affecting customer portals/APIs (e.g., Colt Online, voice APIs) before confirming unauthorized access and data exfiltration from certain internal support systems. SecurityWeek, Infosecurity Magazine, industry intelligence briefs (e.g., RH-ISAC), and independent analysis (Kevin Beaumont / DoublePulsar, JUMPSEC) summarized claims that Warlock ransomware affiliates auctioned stolen material while researchers highlighted plausible Microsoft SharePoint footholds (including discussion of CVE-2025-53770-class issues in emerging-advisory windows). Treat document counts and sensitive categories as partially actor-claimed pending full forensic transparency.
Root cause
Ransomware / extortion operation with confirmed exfiltration from internal business-support systems (company-confirmed breach dimension in Aug 2025 reporting)