Which major companies did the Cl0p hacking group claim to have stolen data from, and how did those companies respond?

The Cl0p hacking group claimed to have stolen large volumes of data from nearly 50 companies worldwide, including Philips (PHG.AS), Shell (SHEL.L), Fiserv (FISV.O), and GE (GE.N). Philips stated it had identified and contained an attempted cybersecurity compromise of a specific enterprise server related to internal data, clarifying that the incident does not impact customer environments. Shell acknowledged awareness of a recent 'possible incident' and said it is working with its security teams and relevant experts to investigate. Fiserv confirmed awareness of the threat actor's claims but, based on its comprehensive review to date, found no evidence that customer, banking, transaction, or personal data had been compromised, nor that its operating environment had been affected. GE could not immediately be reached for comment.

What software vulnerabilities is the Cl0p group exploiting, and what warning did Ransom-ISAC issue about them?

According to Ransom-ISAC, the Cl0p group is exploiting vulnerabilities in PTC Windchill and FlexPLM—software used to aid engineering and manufacturing processes—and issued a notice on July 22 warning of this activity. Boston-based PTC has issued multiple security notices since June 18 urging customers to apply a patch for a vulnerability and sharing details about an unnamed attacker targeting its products. Threat intelligence manager Brandon Parsons described Cl0p as 'professional data extortionists' who do not target specific companies but instead focus on specific zero-day vulnerabilities, exploiting them broadly across organizations using vulnerable software.

Hacking Group Claims Mass Data Theft from Shell, Philips, GE, Fiserv and Dozens of Others

ChemBrief

Hacking Group Claims Mass Data Theft from Shell, Philips, GE, Fiserv and Dozens of Others — ChemBrief Topics

Hacking Group Claims Mass Data Theft from Shell, Philips, GE, Fiserv and Dozens of Others

FAQ