In the latest update on the ongoing MOVEit data breaches, the infamous Cl0p ransomware group has announced another victim: AMC Theatres. This news comes in conjunction with the group’s claim of a data breach at Discovery Network. The cybercriminals have been exploiting a vulnerability in Progress Software’s widely used MOVEit transfer application, causing significant disruptions to various organizations.
Multiple companies have fallen victim to the MOVEit data breaches, resulting in the compromise of sensitive customer and employee information. To gather more information on these alleged breaches, The Cyber Express reached out to both AMC Theatres and Discovery Network. However, as of now, no official statements or confirmations have been received from either company.
According to threat analyst Brett Callow, the impact of these data breaches extends far beyond just AMC Theatres and Discovery Network. The number of victims affected by the MOVEit vulnerability has been rapidly increasing, with over 300 organizations and a staggering 18,154,787 individuals impacted at the time of writing. AMC Theatres and Discovery Network are just two examples of the major corporations targeted by the Cl0p ransomware group in the US, UK, and around the world.
Progress Software, the parent company responsible for the MOVEit transfer application, has recently acknowledged that their product has been targeted in a large-scale cyber attack. In a statement released on July 5th, Progress Software addressed the ongoing vulnerability in MOVEit and introduced a new Service Pack program for all MOVEit transfer application products. This program aims to provide customers with regular and predictable product updates and scheduled fixes, based on valuable feedback received.
The initial Service Pack has already been released and includes essential product and security fixes for supported versions of MOVEit transfer application. Additionally, MOVEit Cloud has also implemented this Service Pack, with plans to include MOVEit Automation in future releases. Notable enhancements in this release focus on improving the MOVEit transfer application database, optimizing the installer, and resolving three new Common Vulnerabilities and Exposures (CVEs). Moving forward, Progress Software intends to release a new Service Pack approximately every two months, ensuring customers stay up-to-date with the latest releases, service packs, and hotfixes through the MOVEit Product Hub.
It is important to note that the information provided in this report is based on internal and external research obtained through various means. Users are responsible for their reliance on this information, and The Cyber Express assumes no liability for the accuracy or consequences of its use.
In conclusion, the Cl0p ransomware group’s exploitation of the MOVEit transfer application vulnerability has resulted in multiple data breaches, with AMC Theatres and Discovery Network being the latest victims. The number of organizations affected continues to rise, highlighting the urgent need for companies to prioritize cybersecurity measures and stay vigilant against cyber threats. Progress Software’s introduction of the Service Pack program aims to address product and security issues more efficiently and ensure customers have access to the latest updates and fixes. However, the fight against cybercrime remains an ongoing battle that requires continuous efforts from both software providers and organizations.
