Hackers fooled Cognizant help desk, says Clorox in $380M cyberattack lawsuit

Clorox alleges that in August 2023 attackers associated with the Scattered Spider group used social engineering to convince Cognizant's service desk to reset employee passwords and MFA without proper verification, granting attackers privileged access that paralyzed Clorox's corporate network, halted manufacturing, caused product shortages and significant financial losses; the filing accuses Cognizant of gross negligence, breach of contract, and botched incident response and seeks substantial damages.