The Associated Press emailed Cl0p on Thursday asking what government agencies it had hacked. Other instances include GoAnywhere servers in early 2023 and Accellion File Transfer Application devices in 20. This is far from the first time Cl0p has breached a file-transfer program to gain access to data it could then use to extort companies. The hackers were actively scanning for targets, penetrating them and stealing data at least as far back as March 29, said SecurityScorecard threat analyst Jared Smith. She said it was “conducting detailed forensic analysis of system activity and has not found any indications of a breach of sensitive information.” She would not say how the agency uses the file-transfer program. Spokeswoman Stephanie Collins said the agency was aware of the hack and has been monitoring the situation closely. The Office of the Comptroller of the Currency in the Treasury Department uses MOVEit, according to federal contracting data. It said it was not able to break down those agencies by country. The cybersecurity firm SecurityScorecard says it detected 2,500 vulnerable MOVEit servers across 790 organizations, including 200 government agencies. Publicly traded corporations, health care providers and some critical infrastructure purveyors do have regulatory obligations. lacks a federal data breach law, and disclosure of hacks varies by state. Federal officials encouraged victims to come forward, but they often don’t. “At this point, we are seeing industry estimates of several hundred of victims across the country,” the senior CISA official said. But cybersecurity researchers say scores if not hundreds of companies could by then have had sensitive data quietly exfiltrated. maker, Progress Software, alerted customers to the breach on May 31 and issued a patch. officials “have no evidence to suggest coordination between Cl0p and the Russian government,” the official said.
0 kommentar(er)
