logo

Clop Leaks: First Wave of Victims Named

ID: d0efe54e-6941-5b6a-bf76-f9162aca404f

STIX ID: report--d0efe54e-6941-5b6a-bf76-f9162aca404f

Feed Name: ReliaQuest Blog

Threat Score
90/100

Date Published: 2023-06-14

Date Updated: 2026-04-29

...
...

The report details the Clop ransomware group's active, large-scale data-extortion campaign exploiting MOVEit Transfer vulnerabilities to exfiltrate and threaten the public release of sensitive data from hundreds of organizations (250+ named), describing timelines of victim naming and staged data leaks, the group’s deviation toward mass victim notifications, references to specific CVEs, and recommended mitigations such as patching, restricting public MFT access, and enhanced detection and response.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.