Ciena

Ciena was compromised in a ransomware attack attributed to everest in January 2026. The organization, operating in the Telecommunications sector in United States, was added to the group's data leak site as part of an extortion campaign.

everest operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

[AI generated] Ciena Corporation is a US-based global supplier of telecommunications networking equipment, software, and services. The company's solutions support the delivery of voice, video, and data traffic for many of the world's largest telecom service providers. Its product portfolio includes solutions for optical transport, broadband access, data center connectivity, and software automation. It was founded in 1992 and headquartered in Hanover, Maryland.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-3300, which may have been leveraged as initial access vectors or for lateral movement.