Cybersecurity incident
Date: 2018-12-20 00:00:00
Affected organization: IBM
Affected country: United States of America
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Industrial-Espionage
Actor: Ministry of State Security's (MSS) Tianjin State Security Department (APT10)
Actor type: Nation-State
Actor country: China
Description: The APT 10 threat actors, in conjunction with the Tianjin State Security Bureau, compromised eight technology service providers, including Hewlett Packard Enterprise and IBM (their cloud services in particular were targeted), to steal commercial secrets from over forty-five client technology companies. The victims include Swedish telecom giant Ericsson, U.S. Navy shipbuilder Huntington Ingalls Industries, and travel reservation system Sabre.