$380M lawsuit claims intruder got Clorox's passwords from Cognizant simply by asking
ID: c7d9ca30-ccdc-5d37-9d3b-8a56b081cd6c
STIX ID: report--c7d9ca30-ccdc-5d37-9d3b-8a56b081cd6c
Feed Name: The Register (Security)
Threat Score
Clorox alleges that in August 2023 an attacker socially engineered Cognizant service-desk staff to reset Okta and MFA credentials (including SMS), enabling access to Clorox systems; the intrusion forced systems offline, paused manufacturing and manual-processed orders for weeks, and prompted a $380 million lawsuit claiming Cognizant violated credential-reset procedures and mishandled incident response.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.