CrowdStrike catches insider feeding information to ScatteredLapsus$Hunters

CrowdStrike has confirmed that an insider shared screenshots taken on internal systems with hackers after they were leaked on Telegram by the ScatteredLapsus$Hunters threat actors, according to BleepingComputer. The company noted that its own systems were not breached and that customers’ data was not compromised.

A CrowdStrike spokesperson told BleepingComputer that they identified and terminated a suspicious insider last month following an internal investigation that determined he shared pictures of his computer screen externally. The firm emphasised that its systems were never compromised and customers remained protected throughout the incident. CrowdStrike has turned the case over to relevant law enforcement agencies, according to the spokesperson.