MOVEit zero-day compromises 600 organizations and 40 million individuals

Share post:

The Clop ransomware gang has used a zero-day vulnerability in MOVEit to attack over 600 companies and 40 million people including healthcare organizations, educational institutions, financial institutions, government entities, and others.

The attack, which appears to have been tested by Clop hackers since 2021, but broad exploitation appears to have begun in late May 2023, also exploited weaknesses in Fortra’s GoAnywhere file-transfer service and Accellion’s file-transfer devices. Meanwhile, federal contractor Maximus experienced one of the most serious breaches associated with the MOVEit event, possibly exposing personally identifiable information of up to 11 million people.

Even prestigious schools such as Colorado State University were not immune, falling prey to six separate attacks from diverse perspectives. Third-party suppliers for the institution, such as TIAA, National Student Clearinghouse, Corebridge Financial, Genworth Financial, Sunlife, and The Hartford, all disclosed data breaches connected to the MOVEit attacks.

The hack also spread its tentacles to prominent accounting companies such as Deloitte, Ernst & Young, and PwC, putting sensitive client information at risk.

The sources for this piece include an article in CIODIVE.

SUBSCRIBE NOW

Related articles

DOGE’s Teen Hacker Stirs Concern Over Musk Team’s Access to Federal Databases

A 19-year-old named Edward “Big Balls” Coristine has raised red flags after Wired revealed he holds a key...

Deep Seek and Open Source AI – Without the Hype: Discussion with Robert Falzon, Head of Engineering, Check Point

DeepSeek AI is shaking up the cybersecurity world—are we prepared for the risks? Join host Jim Love and...

Researchers Jailbreak DeepSeek AI, Expose System Prompt and Raise Security Concerns

Security researchers at Wallarm have successfully jailbroken DeepSeek, a recently released open-source AI model from China. The jailbreak...

New SMS Phishing Scam Targets U.S. Toll Road Users with Fake Payment Alerts

Brian Krebs of the Krebs on Security blog did a big piece leading with how residents across the...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways