Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.
Global cyberattack overview:
- Who: The Cybersecurity and Infrastructure Security Agency says it is working with several federal agencies in an attempt to negate the effects of a cyber attack perpetrated by the Russian hacking group CL0P.
- Why: CL0P has taken responsibility for an attack on the file-sharing software MOVEit Transfer that is used by a number of organizations and federal agencies to share files.
- Where: Nationwide.
The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that it is working to counter a global cyberattack that has impacted US agencies and allies, including NATO member countries.
Russian hacking group CL0P has taken responsibility for the cyber attack, which targeted file transfer system MOVEit Transfer, which is used by several federal agencies and a number of others.
Experts in the cybersecurity field say the hackers have been operating since 2014 from within Russia, and that they have the approval of Moscow’s intelligence services, reports CBS News.
A senior official with the CISA has reportedly declined to divulge which federal agencies have been impacted by the cyber attack, but noted that the Energy Department had indicated to the agency that there had been an incident.
There is no indication at this time that the cyberattack has affected any of the branches of the military or the intelligence community, according to the CISA official, reports CBS News.
“At this time, we are not tracking any significant impacts to the federal civilian executive branch (.gov) enterprise but are continuing to work with our partners on this issue,” the agency said in a statement.
CL0P has not leaked any federal data, made extortion demands of federal agencies, says CISA
Federal agencies have reportedly not been given any extortion demands, nor has any federal data been leaked by the hacking group, with the CISA saying many organizations were able to patch the vulnerability prior to an attempted intrusion.
CL0P has been holding the data for a period of seven days, while threatening to publish it in the event a ransom is not paid, reports CBS News.
The CISA, along with the Federal Bureau of Investigations, reportedly issued warnings earlier this month that a bad actor had been using ransomware to exploit a vulnerability in the MOVEit file-sharing software.
Last month, the U.S. Department of Justice announced that it was able to disrupt a cyber espionage operation that was being run by agents who were working within a unit of the Federal Security Services of the Russian Federation.
Have you been impacted by the global cyberattack on MOVEit Transfer? Let us know in the comments!
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
5 thoughts onGlobal cyberattack affects US agencies, NATO countries
Please add me. These big and even the smaller companies are supposed to have the consumers best interest in mind at all times. As consumers we trust these companies when we give out our personal information to them. What were we thinking. So sad and yet like we all know this will follow us and effect us for years down the road. Please add me.
site your site is not working at all will not let me do anything at all WTF
What happens if we were affected? Do they face a class action lawsuit directly or will the companies who were breached going to face the consequences of the hack? I received a letter from United Health Care about a breech but I’ve already requested information on that suit directly.
I received a letter from one of my medical/dental insurance providers June 17, 2023 informing me that my data was indeed one of the many that was stolen when the Moveit cyberattack accused. The letter was dated May 23, 2023 and the agency stated in the letter that they were aware of the hack in January and February 2023. All of which is unacceptable. All of my personal information including my social security number was taken along with all of my medical records. I want to sue for the delay in informing me of the breach, considering it took 5+ months for the agency to let me know about the cyberattack and breach of my information. I live in Louisiana.
ODOT says the hack, which impacts roughly 90% of the Oregon state’s drivers license and ID card files, was part of a global data breach involving the data software MOVEit Transfer earlier this month.