UK communications regulator Ofcom suffered a data breach after it was impacted by the Clop extortion campaign targeting a zero-day bug in MOVEit software.
Ofcom confirmed the news and even though its own systems were not compromised during the attack, the threat actors managed to access information of both the organizations it regulates and the personal data of 412 Ofcom employees.
Ofcom is a UK government-approved regulator for communications services, best known for overseeing the broadcasting, telecoms, and postal industries.
MOVEit Transfer is a managed file transfer software developed by US-based developer Ipswitch. The zero-day vulnerability affects MOVEit Transfer’s servers, allowing attackers to access and download the stored data.
The telecom regulator immediately took action to prevent further use of the MOVEit service and implemenedt the recommended security measures. All affected Ofcom-regulated companies were notified regarding the attack.
Comments