- PLL Electric Utilities confirm data leaked online
- It was stolen from a third -party provider during Moveit Hack
- No bank or payment information was leaked
It’s been almost two years since Moveit MFT -Data violation of failure, but companies and their customers still feel the consequences.
PLL Electric Utilities is the latest to confirm information stolen back in 2023 has now been leaked online when one of its suppliers was postponed through Moveit.
“The information did not extend beyond basic information such as name, address, telephone number, e email address and account number,” a company’s spokesman said. Bank or credit card information, social security number or account passwords were not published as PPL did not share this data with the compromised supplier in the first place – but the information can still be used for phishing attacks, identity theft, social engineering and more.
Millions of victims
“This question is completely unified to PPL’s systems and critical infrastructure across all our service areas,” the company said.
The 2023 MOVEIT Data violation was a large-scale cyberattack that utilized a zero-day vulnerability in MOVEIT Managed File Transfer, a file transfer software built by progress software. It was discovered at the end of May 2023 when the error allowed attackers to carry out SQL injection attacks and gain unauthorized access to sensitive data.
Ransomware -actors known as CL0P were the ones who took advantage of the mistake of stealing data from organizations around the world. The attack affected more than 600 organizations and approx. 40 million individuals, including governments, financial institutions, healthcare providers and larger companies. Among more notable victims are American federal agencies, British Airways, Shell and BBC.
CL0P Ransomware -Band is estimated to have extorted between $ 75 million and $ 100 million. Despite a low percentage of the victims who chose to pay, the group secured significant amounts from some selected few who met their high ransom.
Via The post
