Clop ransomware gang leaks online what looks like stolen Bombardier blueprints of GlobalEye radar snoop jet The Clop ransomware gang claims to have stolen documents from aerospace giant Bombardier’s defense division – and has leaked what appears to be a CAD drawing of one of its military aircraft products, raising fears over what else they’ve got. Over on their Tor hidden service, the cyber-extortionists published what they said …
Whilst I haven't worked with Accellion itself there are plenty of other similar file transfer/workflow type packages out there.
Why not SFTP you cry? Well for one thing, these platforms tend to offer lots of features that companies find genuinely useful without having to roll their own and usually support various different transfer/authentication options *including* SFTP, IP address whitelisting etc.
Maybe you want to push files to a remote server, perhaps you wish to be able to see the time and date that a client logged in to pull their files. Perhaps the recipient requests that certain files be retransmitted because they had a processing issue on their side.
None of the above is hideously complex, but it is non-trivial if you want it to work well and not have an interface that stinks.
From Wikipedia
Accellion, Inc. is a Palo Alto, California-based private cloud solutions company focused on secure file sharing and collaboration
Woops.
From Accelion's website:
Avoid OneDrive Sharing Pitfalls
5 Key Safeguards to Prevent a Data Breach Following Your Office 365 Rollout
Protect your intellectual property, demonstrate compliance, and reap the full benefits of Office 365.
Re-woops.
>What on Earth is an Accellion and why would anyone use it or pay for it when there’s SFTP?
Most Commentards would be able to use SFTP with ease; however, I suspect many "normal" people would struggle with the command line. Most GUI wrappers seem pretty clunky TBH*
*feel free to suggest nice ones if I'm wrong
The 2030's is going to see company network security beefed up by a large margin.
There have been so many high-profile hacks since a few years, I cannot imagine that the security industry isn't feeling a major kick in the rear and is going to react in a big way.
At least, I hope so, or God save our data because we won't be able to.
As someone who works in the field of Airborne radars - a CAD model of the radar is not particularly high value. Probably NATO Unrestricted, but Commerically confidential is about as high a rating as it would get.
If they have any of the documents about the Electronics of the Radar though, THEN some people will be worried. The electronic and processing specs (channels, algorithms, frequency bands, etc.) are all massive secrets at least NATO Secret if not higher, and so I doubt very much these would be on any transfer server. Thats the sort of thing people get shown on a piece of paper whilst standing in a locked office. (Not joking).
So Bombardier are probably a bit embarrassed about being hacked, but so long as its restriced to their transfer server, they probably wont be having too many sleepless nights.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
