Menu
Browse

Sigmund Software

Aliases: 2 aliases
Primary URL Location Industry
sigmundsoftware[.]com
Country United States of America
Technology Icon
Technology
Profile

Sigmund Software, also known simply as Sigmund, is a software company headquartered in the United States of America. The organization develops applications and manages associated source code for its customers. As part of its business operations, Sigmund handles customer financial data and personal information that are processed through its software solutions. The firm’s activities place it within the broader technology sector, where it provides software products and services to various markets. Its headquarters location in the United States situates it within a major hub for software development and innovation.

On March 12, 2022, Sigmund Software experienced a coordinated ransomware attack involving two distinct criminal groups, Hive and Spy. According to the incident overview, Hive had infiltrated Sigmund’s network approximately six months prior to the attack, during which it exfiltrated about 160 gigabytes of data. The stolen material included application source code, customer financial data, and personal information belonging to users of Sigmund’s software. In addition to data theft, Hive encrypted one of Sigmund’s backup servers, rendering those backups inaccessible. Simultaneously, the Spy group preemptively encrypted the company’s primary files before Hive could complete its own encryption routine.

Sigmund paid Spy a ransom of $675,000 to obtain a decryption key for the primary files, while refusing Hive’s demand of $500,000. Hive subsequently leaked corporate and tax-related data from entities affiliated with Sigmund, and analysis of the leaked samples revealed limited amounts of personal and protected health information. The dual attack disrupted Sigmund’s normal operations, causing downtime and requiring significant remediation efforts. Sensitive business details and client information were exposed as a result of the data exfiltration and subsequent leak. The incident underscores the exposure faced by software firms that manage substantial volumes of proprietary code and customer data.

Incidents
Linked incidents available to members
1 incident