UK-based telecommunications firm Colt Expertise Providers is coping with a cyberattack that has prompted a multi-day outage of a few of the firm’s operations, together with internet hosting and porting companies, Colt On-line, and Voice API platforms.
The British telecommunications and community companies supplier disclosed that the assault began on August 12 and the disruption continues as its IT workers works across the clock to mitigate its results.
Based in 1992 as Metropolis of London Telecommunications (COLT) and bought by Constancy Investments in 2015, Colt is a serious telecommunications service supplier working in 30 nations throughout Europe, Asia, and North America. The corporate employs 75,000 km of fiber networks linking 900 knowledge facilities.
Providers nonetheless offline
Initially, the corporate introduced a “technical concern” with out confirming a cyber incident. Nevertheless, the character of the occasion was communicated in subsequent standing updates.
The assault pressured the agency to take particular programs offline as a protecting measure, which affected the operations of help companies, together with Colt On-line and the Voice API platform.
Buyer communication via on-line portals is at the moment unavailable, and shoppers are suggested to contact Colt by e mail or telephone and anticipate slower-than-usual responses.
The corporate underlined that the impacted programs are help companies, not the core buyer community infrastructure.
As of as we speak, there is no such thing as a estimation for restoring affected programs and operations.
Colt says it has notified the authorities in regards to the incident with out offering any particulars in regards to the perpetrators or the kind of assault.
WarLock claims the assault
A menace actor utilizing the alias ‘cnkjasdfgd’ and claiming to be a member of the WarLock ransomware gang claimed the assault and provided to promote for $200,000 a batch of 1 million paperwork allegedly stolen from Colt.
A number of knowledge samples have additionally been printed to show the validity of the information. Based on the theater actor, the stolen information embrace monetary, worker, buyer, and government knowledge, inside emails, and software program growth data.
Supply: KELA
Though the telecommunications firm didn’t disclose the reason for the breach, safety researcher Kevin Beaumont says that the hacker probably managed to realize preliminary entry by exploiting a distant code execution vulnerability in Microsoft SharePoint tracked as CVE-2025-53770.
The safety concern has been exploited as a zero-day since at the very least July 18 and is taken into account essential in severity. Microsoft addressed it in a safety replace on July 21.
Based on Beaumont, the hackers stole a couple of hundred gigabytes of information with buyer knowledge and documentation.
BleepingComputer has contacted Colt to ask for verification of those allegations, however a remark wasn’t instantly accessible.
46% of environments had passwords cracked, almost doubling from 25% final yr.
Get the Picus Blue Report 2025 now for a complete have a look at extra findings on prevention, detection, and knowledge exfiltration tendencies.
