Two Asia-based data centers used by major global corporations were targeted in a series of cyberattack first identified in 2021 and as recently as January 2023. Data exfiltrated over the past three years included the credentials of those managing the data centers and login information used by customers to access cloud services hosted with the two data-center operators.Shanghai-based GDS Holdings and Singapore-based ST Telemedia Global Data Centres were the targets of the attack, according to a recent report by Resecurity. In a Feb. 20 report published by Bloomberg, Resecurity researchers identified some of the data center customers impacted as Alibaba Group Holding, Amazon, Goldman Sachs Group and Walmart.Exfiltrated from the data centers was data tied to corporate helpdesk systems (customer service, ticket management and support portals), remote management services and datacenter employee and customer email account credentials. Researchers said adversaries used the data to dig deeper into systems and attempted to gain access to embedded server management services (Remote Hands Services) such as OpenBMC, FreeIPMI and iDRAC.It’s unclear to what extent nearly a dozen of the Fortune 100 companies cited by Resecurity were impacted. The Bloomberg report indicated that most of the identified firms either said no damage was caused to customers, declined to comment or said additional safeguards were put in place after being made aware of the incidents. Researchers compared the attacks to SolarWinds and Kaseya. “Threat actors continue to upgrade their tradecraft and tactics to a new sophisticated level — where data center organizations are becoming one of their major targets,” they wrote.
Cloud Security, Supply chain
Two data centers used by major tech firms hacked

Researchers compared attacks on Shanghai-based GDS Holdings and Singapore-based ST Telemedia Global Data Centres to the SolarWinds and Kaseya hacks. (iStock via Getty Images)
An In-Depth Guide to Cloud Security
Get essential knowledge and practical strategies to fortify your cloud security.
Related Events
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news
You can skip this ad in 5 seconds