Skip to content

Cyber-Assault Exposes Potential Theft of Colt Customer Data

Dark web file names linked to Colt customers can be requested through a special call center hotline.

Data Breach Confirmation: Colt Suggests Customer Information Potentially Swiped in Cyber Assault
Data Breach Confirmation: Colt Suggests Customer Information Potentially Swiped in Cyber Assault

Cyber-Assault Exposes Potential Theft of Colt Customer Data

Colt Technology Services Suffers Cyber Incident at the Hands of Warlock Ransomware Group

Colt Technology Services, a leading global provider of voice, data, and network services, has been hit by a cyber incident perpetrated by the Warlock ransomware group. The incident, which was first reported on August 14, 2025, has resulted in the disruption of several support services, including hosting and porting services, Colt Online, and Voice API platforms.

In an update published on August 21, Colt revealed that certain files from its systems may have been accessed by the criminal group, potentially containing information related to its customers. The company is currently working to determine the precise nature of the files and the information they contain. These files have been posted on the dark web by the group.

Warlock, known for employing a strategy called 'double extortion,' is auctioning the compromised data in a private auction closing on August 27. Instead of publicly exposing stolen data, the group prefers to encrypt the data and demand ransom for the decryption keys, while also threatening to release the data if their demands are not met.

The Warlock ransomware group has also been linked to a cyber-attack against Orange Belgium. According to experts like Kevin Beaumont and Trend Micro researchers, the operators of Warlock have been targeting the Microsoft SharePoint 'ToolShell' vulnerability exploit chain.

In response to the incident, Colt took some systems offline on August 14. To assist its customers, Colt is offering the option to request a list of filenames posted on the dark web by calling a dedicated call center.

It's worth noting that the cyber incident targeted an internal system separate from its customers' infrastructure. Colt assures its customers that their data remains secure and that it is committed to resolving the issue as quickly as possible.

As the situation continues to evolve, Colt Technology Services will provide updates to keep its customers and the public informed.

Read also: