Chris Swagler | June 30th, 2023

This weekly ransomware wrap-up features an exploited zero-day vulnerability in a file Transfer platform, MOVEit, and how one ransomware group is using it to steal companies’ data.

Clop ransomware claimed responsibility for stealing data from two major law firms, Kirkland & Ellis LLP and K&L Gates LLP, as a result of the vulnerability in the MOVEit Transfer software.

Siemens Energy, a Munich-based energy technology company, has confirmed that data was stolen during the recent Clop ransomware data-theft attacks using a zero-day vulnerability in the MOVEit Transfer platform.

UCLA confirmed it was affected by the MOVEit transfer breach. The vulnerability was illegally used by an unauthorized third party to gain access to UCLA’s MOVEit platform.

Genworth Financial confirmed threat operators stole the private data of between 2.5 million and 2.7 million life insurance policyholders as a result of attacks linked to the MOVEit file transfer vulnerabilities.

The U.S. Department of Health and Human Services (HHS) was among those affected by a MOVEit Transfer vulnerability with threat operators gaining access to data.