Maxar Technologies, a leading U.S.-based satellite and aerospace company, recently disclosed a significant data breach impacting its employees.

According to filings with California’s attorney general, the breach occurred on October 4, 2024, and involved a hacker using a Hong Kong-based IP address to infiltrate the company’s systems. Although the true location of the hacker remains unclear, the attack exposed personal data belonging to both current and former employees.

The breach is particularly concerning due to Maxar’s critical role in national security and space technology.

The company, which operates one of the largest commercial satellite constellations, supplies advanced imagery to the U.S. government for missions ranging from disaster response to intelligence gathering. This incident raises questions about the cybersecurity measures in place that protect organizations handling sensitive data.

Why It Matters: Maxar’s breach highlights the increasing vulnerability of high-profile technology companies, especially those integral to national security. As cyber threats evolve, the risks extend beyond employee data exposure to potential compromises of proprietary systems and critical infrastructure.

• Nature of the Breach: The hacker gained access to Maxar’s network on October 4, 2024, and was undetected for approximately one week. Files containing sensitive employee information, including Social Security numbers, job titles, and physical addresses, were compromised.

• Employee Impact: The data breach affects both current and former Maxar employees, totaling 2,600 individuals. Impacted parties are being offered identity protection services, including IDShield and IDX monitoring, to mitigate risks of identity theft.

• Company Response: Maxar’s security team detected the breach on October 11 and immediately secured its systems. The company confirmed that no financial data, such as bank account information, was exposed during the attack.

• Maxar’s Role in National Security: With more than half its workforce holding U.S. security clearances, Maxar’s satellite imagery supports classified government missions. This represents the potential implications of any unauthorized system access.

• Related Concerns: In July 2024, a threat actor claimed to have scraped user data from GeoHIVE, a geospatial intelligence platform owned by Maxar Technologies. While unrelated, this incident adds to broader concerns about the company’s cybersecurity posture.

Go Deeper -> Space tech giant Maxar confirms hacker accessed employees’ personal data – TechCrunch

US space tech giant Maxar discloses employee data breach – BleepingComputer