SEMIKRON - EXTREMELY LOW LEVEL OF CYBERSECURITY. 2 TB OF CORPORATE DATA STOLEN Listed by lv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 04, 2022, the ransomware group known as lv listed SEMIKRON on its leak site, claiming the company suffered a ransomware attack in which 2 TB of corporate data were stolen. Public reporting identifies the exposed material only as internal files; the number of people affected remains unknown, and independent confirmation of the group's claims has not been detailed in the available record.

The listing matters because SEMIKRON operates in a sector that routinely handles technical, commercial, and operational information. Even when exact contents stay unconfirmed, a claimed exfiltration of this scale raises concrete questions for employees, partners, and anyone whose data may have been held in corporate systems.

What happened

According to the leak-site listing dated August 04, 2022, lv claimed responsibility for a ransomware attack on SEMIKRON and stated that 2 TB of corporate data had been stolen. The group described the material as internal files exfiltrated in the attack and accompanied the listing with the headline asserting an “extremely low level of cybersecurity.” No further public detail has been supplied in the record about the precise date of intrusion, the initial access method, whether systems were encrypted, or whether any ransom demand was paid or refused. The number of individuals affected is listed as unknown. All specifics beyond the group’s own claims remain undisclosed.

Inside lv

lv is a ransomware operation that has appeared in public threat reporting as a group that steals data before or alongside encryption and then pressures victims by threatening to publish the material on a dedicated leak site. Like other actors in this category, lv typically advertises victims with brief descriptions of the alleged haul, sometimes including volume figures, and uses the listing itself as leverage. The group’s claims about any single victim, including SEMIKRON, should be treated as unverified assertions unless corroborated by the organisation or independent investigators. No additional statements attributed to lv about this specific incident appear in the provided facts beyond the leak-site entry itself.

Who is SEMIKRON?

SEMIKRON is a long-established manufacturer of power electronics components, including power semiconductor modules used in industrial drives, renewable-energy systems, and other high-power applications. Organisations of this type typically maintain engineering documentation, supply-chain records, customer and partner information, internal financial and operational files, and employee data. A breach affecting such a firm is consequential because the data often includes proprietary technical material and business relationships that extend across multiple industries and jurisdictions. Disruption or exposure can affect not only the company but also customers and suppliers who rely on the integrity of those systems and relationships.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack and that lv claimed 2 TB of corporate data were stolen. Exact file inventories, data categories, and whether personal information of employees or third parties was included have not been disclosed in the public record. Organisations in SEMIKRON’s sector commonly hold the following kinds of material; none of these can be confirmed as present in this incident:

• Engineering drawings, specifications, and product documentation
• Supply-chain, procurement, and customer-contract records
• Internal operational, financial, and administrative files
• Employee or contractor contact and HR-related information

Because the precise contents remain unconfirmed, any assessment of exposure must stay provisional.

Why it matters

For individuals, the principal risk is that personal or professional details held in corporate systems could later appear in secondary leaks or be misused for phishing, identity fraud, or targeted social engineering. For the organisation, loss of control over internal files can damage commercial confidentiality, complicate relations with partners, and create regulatory or contractual notification obligations depending on the jurisdictions and data types involved. Even when the full scope stays unknown, a claimed multi-terabyte exfiltration signals that sensitive business information may no longer be under the company’s sole control. The absence of confirmed victim counts does not eliminate these risks; it simply means the scale of personal impact cannot yet be quantified.

Were you affected?

If you are a current or former employee, contractor, customer, or supplier of SEMIKRON, treat the possibility of exposure seriously until more definitive information appears. Monitor financial and email accounts for unusual activity, be cautious of unsolicited messages that reference the company or technical projects, and consider placing fraud alerts where appropriate. You can also run a free exposure scan of your email address to check whether it has already surfaced in known breach data sets. Keep records of any suspicious contact and follow official guidance issued by the organisation or relevant authorities if and when it becomes available.

AICompiled with AI assistance from public sources and published under our editorial standards.