AnswersPublished22 sources
D1R ransomware group claimed Synopsys, Bosch, and Arm breaches — Synopsys found no evidence
On July 13, 2026, the D1R ransomware group claimed it breached Synopsys via a web vulnerability, stole a 40,000 entry corporate client database, and used that data to target Bosch and Arm.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: Search & fact-check with cited sources for What happened when the newly emerged D1R ransomware group claimed to have breached Synopsys's sys. Article summary: Here is a thorough, source-backed account of the incident and the corporate responses.. Topic tags: general, general web, user generated, government. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, charts with fake numbers, clickbait thumbnails, icons, and tiny thumbnail layouts. Make it useful as an illustrative visual, not as fact
On July 13, 2026, a previously unknown ransomware group called D1R appeared on the dark web and made a dramatic claim: it had breached Synopsys, a major US-based semiconductor design firm, and stolen a database of roughly 40,000 corporate clients. The group then alleged it used that data to identify and compromise two of Synopsys's customers — automotive giant Bosch and chip designer Arm. Within days, Synopsys publicly refuted the claim, saying its investigation found no evidence of a breach. This article is a source-backed account of what happened, what each company said, and where the situation stands.
What D1R claimed
D1R listed three victims on its Tor-based dark web leak site on July 13, 2026: Synopsys (US), Bosch (Germany), and Arm (UK) . The group's allegations included:
- It exploited a vulnerability in Synopsys's website to access a corporate client database containing approximately 40,000 entries
.
- Using that database (including a file called
TARGETLIST.txt), D1R claimed to have identified and subsequently breached and as downstream targets .
Studio Global AI
Search, cite, and publish your own answer
Use this topic as a starting point for a fresh source-backed answer, then compare citations before you share it.
People also ask
What is the short answer to "D1R ransomware group claimed Synopsys, Bosch, and Arm breaches — Synopsys found no evidence"?
On July 13, 2026, the D1R ransomware group claimed it breached Synopsys via a web vulnerability, stole a 40,000 entry corporate client database, and used that data to target Bosch and Arm.