ASUS confirms vendor breach as Everest gang leaks data, claims ArcSoft and Qualcomm

ASUS confirms a third-party breach after Everest leaks sample data, with the Everest ransomware group claiming access to data from ASUS, ArcSoft and Qualcomm. According to ASUS, a supplier breach exposed some camera source code but did not affect ASUS products, internal systems, or user data, and the company says it is reinforcing supply-chain security.

The Everest ransomware group added ASUS to its Tor data leak site on 2 December 2025, publishing a message that the files include data from ASUS, ArcSoft and Qualcomm and that they stole a database of 1 TB, sharing images of some documents as proof. The group’s claims describe a range of contents, including binary segmentation modules, source code and patches, RAM dumps and memory logs, AI models and weights, and various calibration and testing data. The article notes that the breach relates to a vendor, rather than an impact on end users, and emphasises the ongoing emphasis on supply-chain security.