Acronis said its March 2023 investigation found that one customer’s credentials for uploading diagnostic data to Acronis Support had been compromised outside the company’s systems. The attacker accessed diagnostic data in that customer’s folder, but Acronis reported no compromise of its systems or products and no access to other customers’ data. Those are Acronis’s published findings, not an independent audit conclusion.
What happened in the Acronis data leak?
Acronis says it opened an investigation on March 9, 2023, after a BreachForums post mentioned a data leak. According to the company, a threat actor used credentials belonging to one specific customer to access diagnostic data that the customer had uploaded to Acronis Support. Acronis said those credentials had been compromised outside its systems.
SecurityWeek reported on March 10, 2023, that a threat actor had published an archive said to be 12 GB. The publication described the archive as allegedly containing certificate files, command logs, system configurations and information logs, filesystem archives, scripts, and backup configuration data. Acronis’s incident analysis does not confirm that archive size or independently identify each reported file type.
Was Acronis hacked?
Acronis answered “No” in its incident FAQ, saying: “One customer’s user credentials were compromised outside of our systems.” The company also stated that no Acronis systems or networks were compromised. That wording reflects Acronis’s own investigation conclusions; it should not be read as an independent assessment.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11#1 Best Overall
- Hardware encrypted drive
- Simple to use pin access. RPM-5400
- Administrator password feature
- Bus powered
- Utilizes Military Grade FIPS PUB 197 Validated Encryption Algorithm
SecurityWeek quoted Acronis CISO Kevin Reed as saying that the credentials for one customer’s support diagnostic upload had been compromised and that access to the account had been suspended. Reed also said the company found no evidence of another successful attack or of data in the leak outside that customer’s folder. Those remarks were published as the investigation was underway.
Was customer data compromised?
According to Acronis, the attacker accessed diagnostic data in the affected customer’s folder. The company said that data contained no private or sensitive information and that the attacker did not access other customer data. Its public incident materials do not give a named total for affected people or customers, so the account-specific finding should not be turned into a broader customer count.
Rank #2
- Utilizes Military Grade FIPS PUB 197 Validated Encryption Algorithm
- Super fast USB 3.0 Connection - Data transfer speeds up to 10X faster than USB 2.0
- Software Free Design - With no admin rights needed
- Sealed from Physical Attacks by Tough Epoxy Coating
- Brute Force Self Destruct Feature
How did Acronis respond?
Acronis said it blocked access to the affected account and worked with the customer to assess the impact. It also reviewed logs for other services and said it found no evidence of unauthorized access or exploitation attempts. The company reported sharing indicators of compromise with industry partners and working with law enforcement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the incident findings do—and do not—establish
- Reported access path: Acronis attributed access to one customer’s compromised credentials for uploading support diagnostics.
- Scope reported by Acronis: The company said the accessed folder contained no private or sensitive information and that other customer data was not accessed.
- Systems and products: Acronis said no product or service vulnerability was exploited and no Acronis service, system, or network was compromised.
- Archive details: SecurityWeek’s 12 GB figure and file descriptions were contemporaneous media reporting of alleged contents, not measurements or a file inventory confirmed in Acronis’s incident analysis.
- Time frame: Acronis’s incident analysis was last updated March 31, 2023. These statements concern that historical incident and do not, by themselves, establish the security status of Acronis products today.
Sources: Acronis, “Acronis security incident analysis” (last updated March 31, 2023); SecurityWeek, “Acronis Clarifies Hack Impact Following Data Leak” (March 10, 2023).
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Rank #4
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Rank #3
- Slim durable design to help take your important files with you
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- Back up smarter with included device management software[2] with defense against ransomware
- Help secure your important files with password protection and hardware encryption
- 3-year limited warranty
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
