Siemens Energy has confirmed that data was stolen during the recent Clop ransomware data-theft attacks using a zero-day vulnerability in the MOVEit Transfer platform.
Siemens Energy, a Munich-based energy technology company with a global presence, employs 91,000 people and has an annual revenue of $35 billion.
It designs, develops, and manufactures a wide range of industrial products and also provides a wide range of cybersecurity consulting services for the oil and gas industry, including incident response plans, vulnerability assessment, and patch management.
Clop ransomware gang has listed Siemens Energy on their data leak site, indicating that data was stolen during a breach on the company.
The gang first lists a company’s name on their data leak site to apply pressure, followed by the leaking of data.
According to a Siemens Energy spokesperson, they were breached in the recent Clop data-theft attacks utilizing a MOVEit Transfer zero-day vulnerability tracked as CVE-2023-34362, while no data has been leaked. Their business operations were also not impacted. And they have taken immediate action upon learning about the incident.
Along with Siemens Energy, Clop claim to have stolen data from MOVEit Transfer systems of another industry giant, Schneider Electric.
Image Credits : Global Energy
Comments