Siemens and UCLA say data compromised in MOVEit data breach (updated)

Genworth Financial

27/06/2023 17:22

(Rewrites with comments from UCLA, FBI, background)
       FRANKFURT, June 27 (Reuters) - Siemens Energy  ENR1n.DE 
and the University of California, Los Angeles (UCLA) said on
Tuesday they were among victims of the MOVEit hack that has
affected scores of corporations, governments and other
institutions in recent weeks. 
    The hackers behind the wide-ranging breach, Cl0p, had
earlier boasted about stealing data from UCLA and Siemens on
their website. Cl0p also claimed to have stolen data from
biopharmaceutical company Abbvie Inc  ABBV.N  and French
industrial group Schneider Electric  SCHN.PA . 
    Those two firms did not immediately provide comment. Cl0p
did not immediately return a message. The FBI said in a
statement it was "aware of and investigating the recent
exploitation of a MOVEit vulnerability by malicious ransomware
actors".
    Siemens and UCLA provided few additional details about the
scope or consequences of the breach. Siemens said none of its
critical data had been compromised and its operations remained
unaffected. UCLA said its campus systems were unaffected and
that "all of those who have been impacted have been notified".
    The MOVEit software is used by organizations around the
world to share sensitive data. Last week, U.S. pension fund
Calpers and insurer Genworth Financial  GNW.N  said personal
information of their members and customers had been compromised
as part of the hack.

 (Reporting by Christoph Steitz and Raphael Satter
Editing by Matthias Williams and Mark Potter)
 ((christoph.steitz@thomsonreuters.com; +49 30 220 133 647;))