Klue hack results in data breach at several cybersecurity firms

A cybercrime group called Icarus claimed responsibility for a June 12 breach of market intelligence provider Klue, exploiting a compromised legacy credential tied to an integration tool to access and steal customer cloud data (including Salesforce). Several prominent customers reported stolen business contact and account information; Klue engaged CrowdStrike, disconnected integrations to stop further access, and faces threats the stolen data will be published if a ransom isn’t paid.