Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Urgent Security Notice: RedRays Discloses Major Data Breach Affecting SAP Customers

RedRays has made an alarming discovery through their rigorous internet data monitoring and analysis: significant breaches involving user logins and passwords of more than 110 SAP customers. These credentials are now circulating on the black market, posing a potential threat to numerous businesses.

The origin of these user credentials remains uncertain; however, there are suspicions that a large-scale phishing attack could be the source. This situation represents a serious security risk, potentially impacting business continuity and data integrity for numerous SAP customers.

Upon discovering this critical issue, RedRays promptly alerted SAP’s Security Team. We are now collaborating closely with SAP to ensure the affected SAP users receive prompt notification and that necessary steps are taken to mitigate the impact of these leaks.

Several affected companies have already confirmed the validity of the leaked login/password combinations, underscoring the severity of the issue. RedRays is steadfast in its understanding that the security and integrity of SAP systems are paramount, and we stand ready to provide all necessary information and assistance in this regard.

RedRays will continue to provide updates on any major developments. We urge all SAP users to remain vigilant.

Update 1: We believe that there is no exploited vulnerability of SAP products. We are confident that the leak is related to a large-scale phishing attack.

Contact us

More to explorer

RedRays at Black Hat MEA 2023


SAP Security For All

RedRays Security Platform for Penetration testers and Bug hunters

The product package is specifically created for cyber security experts who have encountered SAP while participating in bug bounty programs.

RedRays Security Platform for SAP Consultants

The product package is designed for SAP consultants conducting security assessments of SAP ERP systems. We provide essential tools and resources to help professionals in this field conduct their work effectively.

RedRays Security Platform for Enterprises

The product package is specifically optimized to cater to the needs of both small/medium and large companies who are seeking to streamline the process of organizing a comprehensive security system for ERP systems.