MOVEit attack victim count surpasses 1,000 organizations

The blast radius from the mass exploit of a zero-day vulnerability in the MOVEit file transfer service reached another milestone in its destructive spread: more than 1,000 organizations are impacted, according to Emsisoft and KonBriefing Research.

The number of organizations hit by the wide-scale attack increased nearly 40% last week, underscoring the scope of impact and challenge organizations are encountering as they work to determine potential exposure.

The pool of victims from Clop’s attack spree, which was discovered Memorial Day weekend, continues to grow as downstream victims, which lead to more downstream victims, are identified via public disclosures and the threat actor’s website.

Tracking those victims of the MOVEit campaign is circuitous. For almost two-thirds of the victims, breaches occurred because their third-party vendors used MOVEit or the vendor’s vendors used the file transfer service, according to KonBriefing Research.

To read the complete article, visit Cybersecurity Dive.