Possible Data Breach of OVHcloud

Comments

• Neoon Community Contributor, Veteran

  March 24

  @stefeman said:
  The poster has negative reputation on the site.

  https://breachforums.ac/showthread.php?tid=45598

  Its 100% bullshit. With that much data, they would have better sample to show for it.

  Maybe he got his acc fucked by OVH, after running ilegal shit on it.
• ehab Member

  March 24

  the only image reaction is

  

  Thanked by 4allthemtings beanman109 satorik emgh
• jsg Member, Resident Benchmarker

  March 24

  While the indicators are too few and too weak to just believe that it's true, so IMO are the counter arguments.
  I have no account at OVH but am interested for professional reasons. Some remarks:

  • Octave Klaba said "the cited sample is not found in our databases" - (a) that may well be a typical first and quite early corp. denial, (b) quite specific yet vague, and (c) the "cited sample" may well be the hacker's compilation and not OVH's structuring.
  • "590 TB is too large to transfer/exfiltrate out of OVH" - (a) that figure likely is the "sales front end number", while the actual transfer highly likely was compressed, so the actual transfer number may be about 100 TB (almost certainly very highly compressable ascii data in most tables), and (b) so what? Even half a PB isn't much for OVH.
  • OVH OpSec is supposedly not good (wood floors in DC -> fire, anyone?) so it shouldn't be really shocking that a somewhat spread out transfer of say 100 TB would not be noticed.
  • other, yet unknown factors, e.g. ex-employee knowing internals

  TL;DR probably not true or way smaller than portrayed by the hacker, but so far no solid indication in either direction.

  Thanked by 1WyvernCo
• Monocle Member

  March 24

  590TB Is very very unlikely. Exporting that much data without being detected is not easy.

  Thanked by 3tux WyvernCo forest
• Neoon Community Contributor, Veteran

  March 24

  The costumer db, is not gonna be 590 TB big.
  Maybe.. at best a few TB, which can easily compress prob.

  They probably talking if legit, about the websites they pulled of the servers, I guess.
• fredo1664 Member

  March 24

  590 TB is consistent with an excel file containing the full inventory of their E3-1270v6.

  Thanked by 9brauni lukgth OhJohn COLBYLICIOUS tux WyvernCo forest Decicus oloke
• Fubukibox Member

  March 24

  @stefeman said:
  The poster has negative reputation on the site.

  https://breachforums.ac/showthread.php?tid=45598

  Its 100% bullshit. With that much data, they would have better sample to show for it.

  didn't the old bf domain got raided before by the gov and feds?

  new BF domain
  Behind Cloudflare
  Made on 2026-03-18T18:30:55Z

  Wow
• ascicode Member

  March 24

  AI can be possible, someone tries to get ovh on bad light by claiming it got hacked.
  No wallets and money involved.
• matey0 Member

  March 24

  Basically confirmed to be fake now.
  Crazy how much damage this has done to OVH though.
  

  Thanked by 3concept tentor WyvernCo
• matey0 Member

  March 24 edited March 24

  Or the threat actor is playing 5d chess: OVH has not denied a breach, only stated that the sample isn't in their DB. Maybe this was part of the ransom strategy and a way to give OVH an "out" - and OVH ended up paying?
• stefeman Member

  March 25

  Shortseller probly
• LowEndStalker Member

  March 25

  Looks like the attacker is now claiming that someone was socially engineered.

  https://x.com/darkwebinformer/status/2036574020452360463
• co521320 Member

  March 28

  umm... Need to change the password of my ovh account then.