Networking giant Belden says hackers accessed data on employees, business partners

The U.S. firm issued a statement with few details.

Belden, a U.S. manufacturer of networking and industrial cable products, said Tuesday that unidentified attackers had accessed and copied data on current and former employees, and some of its business partners.

The St. Louis-based company, which reported more than $2 billion in revenue last year, said in a statement that it believed it prevented the attackers from further accessing data on its servers, and that it had hired lawyers to help it “notify appropriate regulatory authorities [of the incident] around the world.” The company said law enforcement is investigating the incident.

Executives did not disclose how many people’s information was compromised. Belden spokesperson Rachael Matthews told CyberScoop the data may have included sensitive personal information, including bank account information and Social Security numbers.

“Personal information accessed and stolen may have contained such information as names, birthdates, government-issued identification numbers (for example, Social Security/national insurance), bank account information of North American employees on Belden payroll, home addresses, email addresses and other general employment-related information,” Matthews said in an email. “Limited company information accessed and stolen related to some of our business partners include bank account data and, for U.S. partners, their taxpayer ID numbers.”

Matthews said Belden is notifying all affected employees and business partners, and that the company is providing “individuals with free monitoring and support services, where available.”

Belden, which has offices on multiple continents, makes fiber-optic cables and networking equipment used in the transportation, oil and gas, and other sectors. Belden has invested considerably in cybersecurity products. The company in 2014 bought cybersecurity company Tripwire, which makes data-integrity software, for $710 million.

Belden said it had hired outside security experts who “determined that Belden was the target of a sophisticated attack by a party outside the company that accessed a limited number of company file servers.”

“This issue is not impacting production from Belden manufacturing plants, quality control or shipping, which are operating normally,” the statement continued.

A Belden spokesperson did not respond to requests for comment on what qualified the attack as “sophisticated,” who was behind it or whether malware was involved.

UPDATE, 2 p.m. EDT: This story has been updated with an additional statement from a Belden spokesperson.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure