Hacking group claims mass data theft from Shell, Philips, GE, Fiserv and dozens of others

A hacking group, Cl0p, announced the theft of extensive data from over 50 companies globally, including Philips, Shell, Fiserv, and GE. Shell acknowledged being aware of a potential incident and is collaborating with security teams to investigate. Philips identified and contained an attempted cybersecurity breach affecting an internal server, with no impact on customer environments.

Fiserv and GE confirmed receiving the threat actor's claims but found no evidence of compromised customer data or operational environment. The group exploits software vulnerabilities, specifically targeting PTC Windchill and FlexPLM used in engineering and manufacturing. These vulnerabilities have been the subject of multiple security notices from PTC since June 18.

The hacking group, known for their professional data extortion tactics, does not target specific companies but focuses on vulnerabilities in widely used software packages.