Everest Ransomware Gang Leaks 1TB of Stolen ASUS Data

The Everest ransomware group has published what it claims is 1 terabyte of stolen ASUS data, escalating a breach first disclosed in early December. The leak follows ASUS’s confirmation that attackers accessed sensitive information through a compromised third‑party vendor.

ASUS acknowledged the intrusion shortly after Everest announced on December 2, 2025, that it had exfiltrated a trove of proprietary material, including files linked to the company’s AI models, memory dumps, and calibration data. According to the group, ASUS failed to respond within a 24‑hour deadline—an ultimatum consistent with Everest’s typical ransom tactics—prompting the full release of the dataset.

Screenshots shared on dark web monitoring platforms show the ASUS archive listed on Everest’s leak site. As reported by Hackread.com, the data is now circulating across several Russian‑language cybercrime forums, including Exploit and DamageLib (formerly XSS.IS). The 1TB dump reportedly consists of nine large files, with some material appearing to originate from ArcSoft and Qualcomm. Hackread.com noted that it did not download or analyze the leaked content.

The ASUS breach is the latest in a string of high‑profile attacks attributed to the Russia‑linked ransomware gang. Over the Christmas period, Everest claimed responsibility for infiltrating Chrysler’s systems and stealing more than 1TB of operational data, including over 105GB of Salesforce‑related records. In November, the group said it had compromised Under Armour and exfiltrated 343GB of internal data, which it later leaked online. The sportswear company now faces multiple lawsuits stemming from the incident.

With Everest continuing to target major global brands, cybersecurity analysts warn that the group’s activity shows no signs of slowing. For ASUS and other recently affected organizations, the immediate priority is determining the full scope of the exposure and strengthening defenses to prevent further compromise.