Broadcom hit by employee data theft after infringement in the supply chain

• Business Systems House was violated in September
• It is an ADP business partner who has maintained Broadcom at some point
• Now sensitive Broadcom files seem to have originated on the dark web

Customers of the Global Semiconductor Giant Broadcom leaked their sensitive data on the Dark Web after a two-step Supply Chain attack. Apparently a company called Business Systems House (BSH), a service provider of Human Capital Management (HCM) from the Middle East, has a ransomware Attack in September 2024, in which a group known as El Dorado (later renamed Blackklock), stolen his files.

This company is a Payroll Company ADP business partner who in turn worked with Broadcom. In fact, the chip giant was busy changing payroll providers when the incident happened, which means that it almost ignited that bullet.