Skip to Main Content
PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Acer Falls Victim to $50 Million Ransomware Attack

Hacker group REvil appears to be the perpetrator behind the breach, which could have been facilitated by a Microsoft Exchange vulnerability.

March 20, 2021
(Photo credit should read ROB ENGELAAR/AFP/Getty Images)

Taiwanese computer manufacturer Acer is facing a ransomware attack from the REvil group.

According to Bleeping Computer, REvil is demanding a $50 million sum from Acer. The company reportedly has until March 28 to send the funds before any alleged stolen data is leaked. Bleeping Computer reports that REvil offered Acer a 20% discount on the payment it was looking to extort out of the company if the money was transferred by Wednesday, March 17.

Though there are few details on what fully transpired, there is some information on how it could have happened. The group may have pulled off the attack by way of the "Hafnium" vulnerability in Microsoft Exchange. Data from Advanced Intel's Andariel cyberintelligence platform was able to link the possible breach to the Microsoft Exchange hack issue. Though Microsoft had been working to release a simple patch for the issue, that doesn't mean it's been erased entirely. The software giant explained that the patch would only work against attacks that had already happened and might not be a panacea to resolve future hacks.

Speaking to Bleeping Computer, Acer was reticent about calling the issue a ransomware attack. Instead, the company stated that it had "reported recent abnormal situations observed to the relevant law enforcement and data protection authorities in multiple countries."

The REvil group made headlines in 2020 when it launched a $6 million ransomware attack on money transfer service Travelex. It's unclear the extent of the potential damage that the group has done with its most recent stunt, or the exact terms of what kind of data may have been breached.

Like What You're Reading?

Sign up for SecurityWatch newsletter for our top privacy and security stories delivered right to your inbox.

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.


Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

Sign up for other newsletters
Newsletter Pointer

About Brittany Vincent

Brittany Vincent has been covering video games and tech for over a decade for publications like G4, Popular Science, Playboy, Empire, Complex, IGN, GamesRadar, Polygon, Kotaku, Maxim, and more. When she’s not writing or gaming, she’s looking for the next great visual novel in the vein of Saya no Uta.

Read Brittany's full bio

Read the latest from Brittany Vincent