A new ransomware gang called WhiteArmor claims it stole 19 GB of data from Hisense, the Chinese electronics and home appliance maker best known for televisions, and is demanding a $5 million ransom in bitcoin. The breach has not been officially confirmed.
The group listed Hisense on its dark web data leak site, where a countdown timer gives the company more than 28 days to respond. It released a 348 KB sample and is threatening to publish the full 19 GB archive, which is sealed. At the time of reporting, the sample was inaccessible because the hosting server was not responding.
WhiteArmor claims to have obtained Hisense’s entire GCRM production document store and the full warranty-claims archive for Malaysia and Singapore. The group says the data includes customer names, phone numbers, email addresses and ID numbers, along with 2,549 suppliers, hundreds of invoices, payments, contracts, return merchandise forms and claim evidence, plus Hisense’s internal CRM application binary. Hisense has not commented on the claims.
“If claims are true, the impact is limited to warranty claims for Malaysia/Singapore, together with customer details,” said Aras Nazarovas, a security researcher. “It mostly affects the confidentiality of customers’ personally identifiable information, such as names, phone numbers, email addresses, and invoices.” The attackers could potentially reverse-engineer the CRM application to target Hisense’s warranty claims processing systems with return fraud or to extract additional customer information.
WhiteArmor is a new data-theft and extortion group that emerged only days ago. It claimed its first victim on Oct. 21, 2026, and its leak site now lists six victims. The group reportedly charges affiliates a 5% fee on successful ransom payments and is recruiting penetration testers, web exploitation experts and zero-day researchers, though those claims are unverified.
Click Here For The Original Source.
——————————————————–
