Tuesday, March 11, 2025
HomeData BreachCognizant Confirms Data Breach After Ransomware Attack

Cognizant Confirms Data Breach After Ransomware Attack

Published on

SIEM as a Service

Follow Us on Google News

IT services giant cognizant suffered a ransomware attack last April which cause service disruptions to its clients.

Cognizant is one of the IT giants that has more than 300,000 employees and it provides IT services, including digital, technology, consulting, and operations services.

Files Stolen in Ransomware Attack

On April 17th the company stated that their internal systems hit by Maze ransomware. The company has informed its clients about the attack and “provided them with Indicators of Compromise (IOCs) and other technical information of a defensive nature”.

Cognizant published a breach notification letter states that the Maze ransomware operators are active with the Cognizant network between April 9 and 11.

The company initially learned that “the attackers staged and likely exfiltrated a limited amount of data from Cognizant’s systems.”

Now based on the company’s further investigation it was found that the majority of the personal information was exposed.

“The majority of the personal information that was impacted was information relating to our corporate credit cards.”

The company started informing all the associates who have an active corporate credit card and they are to offer credit and identity theft monitoring services.

The company also mentioned that they continue to monitor the account for any fraudulent activity and we have been informed that they have not seen an increase in fraud for our accounts.

The ransomware attacks now become an easy and malicious way of robbing individuals and company’s can cost billions of dollars not to mention the privacy and safety implications.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Evade Security Measures to Launch SIM Swap Attacks

SIM swapping fraud continues to pose a significant threat to individuals and financial institutions,...

Ebyte Ransomware Targets Windows Users with Advanced Encryption Techniques

A new ransomware variant, known as Ebyte Ransomware, has emerged as a significant threat...

macOS NULL Pointer Dereference Vulnerability Allow Attackers Exploits Kernel

Historically, NULL pointer dereferences have been a significant vulnerability in operating systems, including macOS....

Apache Camel Vulnerability Allows Attackers to Inject Arbitrary Headers

A newly disclosed security vulnerability in Apache Camel, tracked as CVE-2025-27636, has raised alarms across...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Telecom Giant NTT Confirms Data Breach Affecting 18,000 Corporate Customers

Japanese telecom giant NTT Communications (NTT Com) has confirmed a data breach that compromised...

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data

Netskope Threat Labs uncovered a sprawling phishing operation involving 260 domains hosting approximately 5,000...

Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide

Cybersecurity firm Group-IB, alongside the Royal Thai Police and Singapore Police Force, announced the...