Hacking group claims mass data theft from nearly 50 companies

A hacking group known for exploiting software vulnerabilities has claimed to have stolen large amounts of data from around 50 companies globally, including prominent names like Philips, Shell, Fiserv, and GE. The group, referred to as Cl0p, posted this information on their website, citing their talent for simultaneously attacking multiple targets using software vulnerabilities.

Philips and Shell both acknowledged the potential data theft incident, with Shell stating they are working with their security teams to investigate, and Philips confirming that they have identified and contained an attempted cybersecurity compromise of a specific enterprise server. Neither Philips nor Fiserv found any evidence of customer, banking, transaction, or personal data being compromised.

GE also confirmed they are aware of the claim and are assessing the potential issue. The exact nature of the data stolen and the extent of the theft remain unverified by Reuters. Industry experts warn that the hackers are exploiting vulnerabilities in PTC Windchill and FlexPLM software, tools used in engineering and manufacturing.

PTC issued a security notice urging customers to apply a patch and shared details about an unnamed attacker targeting its products. Threat intelligence manager Brandon Parsons described Cl0p as "professional data extortionists" who don't target specific companies but focus on exploiting zero-day vulnerabilities in key software packages.