Monday, June 24, 2024

MOVEit Hack : Over 185,000 AutoZone Users Personal Data Hacked

AutoZone Inc., a US retailer of automotive parts and accessories, warned customers that their data had been compromised as a result of the Clop MOVEit file transfer attacks.

Personal information, such as the names and social security numbers of 185,000 individuals, was impacted due to the extensive MOVEit hacking campaign.

Founded in 1979, AutoZone, Inc. is the largest retailer in the United States, with 7,140 locations around the country as well as in Mexico, Puerto Rico, Brazil, and the US Virgin Islands.

Overview of the Data Breach

According to the company’s breach notification, more precisely, AutoZone discovered that certain data had been exfiltrated as a result of the MOVEit application’s vulnerability being exploited on or around August 15, 2023.

An unauthorized third party had taken advantage of a MOVEit vulnerability and was able to exfiltrate some data from a system that AutoZone maintains and uses to support the MOVEit application.

Document
Free Webinar

Live API Attack Simulation Webinar

In the upcoming webinar, Karthik Krishnamoorthy, CTO and Vivek Gopalan, VP of Products at Indusface demonstrate how APIs could be hacked. The session will cover: an exploit of OWASP API Top 10 vulnerability, a brute force account take-over (ATO) attack on API, a DDoS attack on an API, how a WAAP could bolster security over an API gateway

The vulnerability in the MOVEit Transfer program affected over two thousand companies worldwide, as has been widely publicized.

AutoZone took action to evaluate and fix the issue as soon as they learned about the incident. In particular, the company launched an inquiry and hired independent specialists.

“We  began an investigation to understand the scope and impact. We also took measures to address the vulnerability, including temporarily disabling the MOVEit application, rebuilding the affected system, and patching the vulnerability. We have no evidence at this time that the incident is ongoing”, reads the notification.

The MOVEit software vulnerability, identified as CVE-2023-34362, was exploited by the Cl0p ransomware group to steal data from numerous enterprises that were utilizing the program for file transfers.

The vulnerability impacted the US Department of Energy, Siemens Energy, Schneider Electric, Shell, hundreds of US schools, and the state of Maine.

Hence, the business advised customers to be on the lookout for identity theft and fraud. Additionally, avoid opening attachments or clicking links in shady emails, and exercise caution when you receive unsolicited communications requesting personal information from you or directing you to a website that provides.

Experience how StorageGuard eliminates the security blind spots in your storage systems by trying a 14-day free trial.

Website

Latest articles

Threat Actor Claiming a 0-day in Linux LPE Via GRUB bootloader

A new threat actor has emerged, claiming a zero-day vulnerability in the Linux GRUB...

LockBit Ransomware Group Claims Hack of US Federal Reserve

The notorious LockBit ransomware group has claimed responsibility for hacking the U.S. Federal Reserve,...

Microsoft Power BI Vulnerability Let Attackers Access Organizations Sensitive Data

A vulnerability in Microsoft Power BI allows unauthorized users to access sensitive data underlying...

Consulting Companies to Pay $11 Million Failing Cybersecurity Requirements

Two consulting companies, Guidehouse Inc. and Nan McKay and Associates, have agreed to pay...

New RAT Malware SneakyChef & SugarGhost Attack Windows Systems

Talos Intelligence has uncovered a sophisticated cyber campaign attributed to the threat actor SneakyChef....

Chinese Winnti Group Intensifies Financially Motivated Attacks

Hackers are increasingly executing financially motivated attacks and all due to the lucrative potential...

PrestaShop Website Under Injection Attack Via Facebook Module

A critical vulnerability has been discovered in the "Facebook" module (pkfacebook) from Promokit.eu for...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Free Webinar

API Vulnerability Scanning

71% of the internet traffic comes from APIs so APIs have become soft targets for hackers.Securing APIs is a simple workflow provided you find API specific vulnerabilities and protect them.In the upcoming webinar, join Vivek Gopalan, VP of Products at Indusface as he takes you through the fundamentals of API vulnerability scanning..
Key takeaways include:

  • Scan API endpoints for OWASP API Top 10 vulnerabilities
  • Perform API penetration testing for business logic vulnerabilities
  • Prioritize the most critical vulnerabilities with AcuRisQ
  • Workflow automation for this entire process

Related Articles