Clop MOVEit attack extortion efforts begin

Initial extortion efforts on organizations compromised by the widespread MOVEit attacks have been commenced by the Clop ransomware operation on Wednesday, with the group naming 13 companies on its site and threatening to leak data beginning June 21 should victims refuse to pay the demanded ransom, according to BleepingComputer. Among the listed organizations that have confirmed impact from MOVEit attacks include UnitedHealthcare Student Resources, the University of Georgia, and the University System of Georgia which are still looking into possible data breaches as well as UK multinational oil and gas corporation Shell, which reported minimal employee and customer data compromise; German printing firm Heidelberger Druck, which has affirmed no breaches stemming from the intrusion; and Landal Greenparks, which reported the compromise of data from nearly 12,000 individuals. Data breaches resulting from the attack are also being investigated by Putnam Investments, which was also listed by Clop. Such developments come after the states of Missouri and Illinois, the American Board of Internal Medicine, and Zellis disclosed being targeted by the MOVEit attacks.