Broadcom

A ransomware attack at a Middle Eastern business partner of payroll company ADP has led to customer data theft at Broadcom. The HR department has begun informing affected current and former staff. The attack, claimed by the El Dorado ransomware group, resulted in the compromise of personal data including National ID numbers, financial account numbers, and personal contact information. The data was made available on the internet, affecting 560 users and potentially opening up the attack surface to 35 additional companies. Broadcom urged affected individuals to enable multi-factor authentication and monitor financial records for unauthorized activity.

Source: https://www.theregister.com/2025/05/16/broadcom_employee_data_stolen_by/

TPRM report: https://scoringcyber.rankiteo.com/company/broadcom

"id": "bro325051825",
"linkid": "broadcom",
"type": "Ransomware",
"date": "5/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 560,
                        'industry': 'Technology',
                        'name': 'Broadcom',
                        'type': 'Company'}],
 'attack_vector': 'Ransomware',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 560,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['National ID numbers',
                                              'financial account numbers',
                                              'personal contact information']},
 'description': 'A ransomware attack at a Middle Eastern business partner of '
                'payroll company ADP has led to customer data theft at '
                'Broadcom. The HR department has begun informing affected '
                'current and former staff. The attack, claimed by the El '
                'Dorado ransomware group, resulted in the compromise of '
                'personal data including National ID numbers, financial '
                'account numbers, and personal contact information. The data '
                'was made available on the internet, affecting 560 users and '
                'potentially opening up the attack surface to 35 additional '
                'companies. Broadcom urged affected individuals to enable '
                'multi-factor authentication and monitor financial records for '
                'unauthorized activity.',
 'impact': {'data_compromised': ['National ID numbers',
                                 'financial account numbers',
                                 'personal contact information'],
            'identity_theft_risk': True,
            'payment_information_risk': True},
 'motivation': 'Data theft and ransom',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'El Dorado'},
 'response': {'communication_strategy': 'Urged affected individuals to enable '
                                        'multi-factor authentication and '
                                        'monitor financial records for '
                                        'unauthorized activity'},
 'threat_actor': 'El Dorado ransomware group',
 'title': 'Ransomware Attack at Broadcom via Middle Eastern Business Partner',
 'type': 'Ransomware'}