The United Kingdom arm of renowned shipping giant DHL has confirmed an ongoing investigation into a data breach that traces its origin back to the exploitation of MOVEit software. This file-sharing tool, developed by Progress Software, became the target of cybercriminals affiliated with the Russia-based Clop ransomware group, who have taken advantage of a vulnerability for nearly two months.
A DHL spokesperson revealed that the company became aware of the incident and promptly launched an investigation in collaboration with relevant experts to assess the extent of the impact. The investigation is still underway, and the company aims to communicate with affected individuals as soon as more information becomes available.
DHL is the latest prominent company to fall victim to the Clop ransomware gang’s exploitation of the MOVEit software bug. Although Progress Software has released patches to address the vulnerability, the cybercriminals have managed to find unpatched targets, leading to further breaches.
According to findings from cybersecurity researchers at Emsisoft, an alarming number of companies have been affected by the data breach. At least 383 organizations have fallen prey to the cyberattack, exposing sensitive information belonging to a staggering 20,421,414 individuals.
The fallout from the breach has prompted several organizations to report the incident to regulators in Maine this week. While some banks and financial institutions admitted that hundreds of thousands of their customers were impacted, other high-profile organizations confirmed breaches with fewer victims.
