The PHP incident bringing to the fo-e the skelton technical staff we have to remidiate situations like this, resposne and communication to end client has been less then impressive. Also seen reports of data been stolen from OpenText reported on mimora(questionable source ) although it did suggest said data will be released on 29th of this month. Zero chance of OT paying ransomware, we will soon find out! AI is a dangerous lover and likes many mistresses.
8 replies (most recent on top)
Will anyone be held accountable for the ransomware incident? Despite the extensive processes and regulations established by GIS, how did this happen? Who will be held responsible, CSO from GIS ? Anupam from Corporate, whose team failed to safeguard the systems? Shannon, who oversaw both teams at the time?
@OP Yeah. I personally know about several publically available systems using shared passwords w/out 2FA for escalated privilige accounts. Every few months, I report it up the chain. The usual response basically equates to "thank you for bringing this to our attention." Still unchanged years later. Thankfully, I no longer work in that area.
@f2 “…unauthorized access to an employee account resulting from a social engineering attempt.”
Anyone else been seeing those company wide, Cyber-security Month posts in Teams?
OT replied to one sec company - Cypro- that reached out for commentary. OT acknowledged " we recently detected unauthorized access to an employee account resulting from a social engineering attempt. We promptly implemented containment measures, including disabling access and the unauthorized access was immediately contained and our investigation remains ongoing"
Something happened.
Customers are inquiring and has anyone received an official comms around this?
sounds like those security requirements is a jok3. They installed splunk, sentinel , put all logs into one place. Given minimum privilege and so on. It still can’t prevent security leak from hackers.
Why? Because we spent most of time on pleasuring IT security and architecture team; paperwork , old school process.
We don’t even have chance to do a real security work.
Employee data??????
What !
https://www.dexpose.io/mimori-ransomware-strikes-opentext-corporation/
https://www.hookphish.com/blog/ransomware-group-mimori-hits-opentext/
On October 20, 2026, the ransomware group Mimori claimed responsibility for a cyberattack against OpenText Corporation (opentext.com), a prominent Canadian technology company. The group has threatened to leak sensitive data unless negotiations are initiated.