A hacker using the alias CoreInjection claims to have obtained sensitive data from Check Point, including user credentials, employee contract details, and internal network maps. Check Point downplays the incident, asserting it relates to a limited and previously addressed breach. The breach supposedly involved just one account with restricted portal access and did not extend to customers' systems, production, or security architecture. Despite the company's stance, security experts like Hudson Rock CTO Alon Gal suggest Check Point may have had an administrator account compromised, indicating a serious breach with potential internal company data leaks.
"id": "che417040125",
"linkid": "check-point-software-technologies",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"