The consequences of the hacks carried out via vulnerabilities in MoveIT continue to increase. It appears that the list of affected companies and individuals is growing.

The number of companies, organizations and individuals affected by the MoveIT hack seems to be increasing. A month and a half after the first reports, the damage is only now becoming clear.

review

At the beginning of June, the American Cybersecurity and Infrastructure Security Agency warned of significant vulnerabilities in MoveIT, the data transfer software from Progress Software. This warning proved to be justified, because a little later the first reports appeared that the Russian hacker collective Clop had been able to exploit the vulnerabilities.

However, it wasn’t just this one case. After these initial vulnerabilities, a new SQL vulnerability appeared in MoveIT and three more vulnerabilities were added earlier this month. The latter immediately received a patch from Progress Software, which also tried to fix the other vulnerabilities as quickly as possible. This was not entirely successful, Clop has been able to steal numerous data from a number of victims over the past few weeks.

The victims

According to cybersecurity company Emisoft, more than twenty million individuals and nearly four hundred organizations and companies have been affected. This second number includes more than fifty public organizations worldwide and seventy American educational institutions.

Notable casualties include:

• Cosmetics company Estee Lauder
• The US Department of Energy
• Deutsche Bank
• The energy giant Shell

A big reason for these high numbers is that Clop has targeted many service companies that work with large clients. For example, the American National Student Clearinghouse works for around 3,500 universities. There is therefore a possibility that more than the seventy schools in question may be affected. Another example of this is the staffing company Zellis, which handles wages for British Airways and the BBC, among others. So there’s a chance these already high numbers aren’t complete yet.