ASUS Responds to Everest Group Breach

ASUS has confirmed a security incident involving a third-party breach tied to the Everest ransomware group. While sensitive data samples were leaked, ASUS reassures there was no impact on their products, internal systems, or user data security. This breach involved a supplier and exposed some camera source code related to ASUS devices. In response, ASUS is enhancing supply chain security measures to align more closely with industry standards.

In their statement, ASUS emphasized, “A supplier experienced a hacking incident that resulted in unauthorized access to some camera source code pertinent to ASUS devices. This situation has not affected our products, our internal company infrastructure, or the privacy of our users.”

Details and Implications of the Data Exposure

On December 2, 2025, the Everest group publicized the breach on their Tor data leak platform. The breach exposed a variety of data types, including:

• Source code and binary segmentation modules
• RAM dumps, memory logs, and AI model data
• Internal OEM tools, firmware, and test calibration data
• Extensive image datasets and crash reports

Cybersecurity expert Nicola Vanin warns of broader implications, noting, “The risk is not solely localized to the camera. This breach poses a threat, potentially serving as a gateway for further exploits.” The leaked camera module source code could potentially reveal vulnerabilities across numerous devices, escalating the risk landscape considerably.

For ongoing updates and insights, follow us on Twitter @securityaffairs and connect with us on Facebook.

—

Discover more technology insights and security updates with Qsentinel. Stay informed and protected.

Ready to take data security seriously?

Discover how Qsentinel can protect your organization against ransomware, enforce true data sovereignty, and stay ahead of the quantum threat. Their purpose-built workspace is designed for exactly that.

👉 Check out Qsentinel now and secure your future.