Thursday, March 27, 2025
HomeData BreachCognizant Confirms Data Breach After Ransomware Attack

Cognizant Confirms Data Breach After Ransomware Attack

Published on

SIEM as a Service

Follow Us on Google News

IT services giant cognizant suffered a ransomware attack last April which cause service disruptions to its clients.

Cognizant is one of the IT giants that has more than 300,000 employees and it provides IT services, including digital, technology, consulting, and operations services.

Files Stolen in Ransomware Attack

On April 17th the company stated that their internal systems hit by Maze ransomware. The company has informed its clients about the attack and “provided them with Indicators of Compromise (IOCs) and other technical information of a defensive nature”.

Cognizant published a breach notification letter states that the Maze ransomware operators are active with the Cognizant network between April 9 and 11.

The company initially learned that “the attackers staged and likely exfiltrated a limited amount of data from Cognizant’s systems.”

Now based on the company’s further investigation it was found that the majority of the personal information was exposed.

“The majority of the personal information that was impacted was information relating to our corporate credit cards.”

The company started informing all the associates who have an active corporate credit card and they are to offer credit and identity theft monitoring services.

The company also mentioned that they continue to monitor the account for any fraudulent activity and we have been informed that they have not seen an increase in fraud for our accounts.

The ransomware attacks now become an easy and malicious way of robbing individuals and company’s can cost billions of dollars not to mention the privacy and safety implications.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Use “Atlantis AIO” Tool to Automate Credential Stuffing Attacks

In a concerning development for cybersecurity professionals, threat actors are increasingly utilizing a powerful...

Hackers Exploit COM Objects for Fileless Malware and Lateral Movement

Security researchers Dylan Tran and Jimmy Bayne have unveiled a new fileless lateral movement...

B1ack’s Stash Marketplace Actors Set to Release 4 Million Stolen Credit Card Records for Free

In a significant escalation of illicit activities, B1ack’s Stash, a notorious dark web carding...

Pakistan APT Hackers Weaponize malicious IndiaPost Site to Target Windows and Android Users

A Pakistan-based Advanced Persistent Threat (APT) group, likely APT36, has launched a multi-platform cyberattack...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Four Members of Hacker Group Behind 90 Worldwide Data Breaches Exposed

A recent investigation by Group-IB has shed light on a notorious cybercriminal operating under...

China’s Baidu Compromised in Data Leak, Affecting Users

Chinese tech giant Baidu has faced severe scrutiny after allegations emerged that a top...

Infosys to Pay $17.5M in Settlement for 2023 Data Breach

Infosys, a leading IT services company, has announced that it has reached an agreement...