Philips, Shell targeted by hacking group

A hacking group targeting software vulnerabilities has claimed responsibility for compromising data from nearly 50 companies globally, including Philips and Shell. The group, known as Cl0p, stated on its website that it had stolen large volumes of data from the affected organizations. Philips confirmed the attack, explaining that it had detected and contained an attempt to compromise a specific enterprise server.

The data breach did not impact customer environments. Shell stated it was aware of the potential incident and was working with security experts to investigate. Fiserv and GE also acknowledged the claim but stated they had not found evidence of compromised data or affected operating environments. The hackers have not independently confirmed the specific data stolen or the extent of the damage.

Ransom-ISAC warned on July 22 that Cl0p was exploiting vulnerabilities in PTC Windchill and FlexPLM, software used for engineering and manufacturing processes. PTC has since issued security notices urging customers to apply a patch for the vulnerability.