Page 193 - Red Hat PR REPORT - OCTOBER 2025

10/8/25, 3:32 PM Data Breach at Red Hat Exposes Thousands of High-Profile Clients
A subsequent 2.2 GB ZIP revealed an astonishing 32 million files stolen from Red Hat Consulting repositories.

Analysis of the directory structure indicates that more than 5,000 enterprise organisations are affected.

Sample Consultancy Engagement Reports were released for seven global companies, including Air Products (AIR),
American Express Global Business Travel (AMEX_GBT), Atos (NHS Scotland), BOC, HSBC, and Walmart.

Equally concerning were exposed .pfx files containing private SSL certificates for ING Bank and Delta Airlines,
putting these organisations at acute risk of impersonation attacks and unauthorized decryption of internal traffic.

Red Hat has publicly stated it will not negotiate with the extortionists, emphasizing that payment only perpetuates

further attacks.

Impacted organisations are urged to contact Red Hat Consulting support to obtain forensic copies of stolen files and
immediately rotate all compromised certificates and stored credentials.

Customers should assume that all data will eventually become public and develop mitigation plans accordingly.

Regulatory bodies may also open investigations into the breach, given the involvement of private citizen data and
protected healthcare systems.

As Crimson Collective continues trading sensitive files online, the incident underscores the growing sophistication
of extortion groups and the need for enterprises to reinforce zero-trust architectures and rapid incident response

protocols.

https://cyberpress.org/data-breach-at-red-hat-exposes-thousands-of-high-profile-clients/ 2/3