Enstar (US) Inc.

The Vermont Office of the Attorney General reported a data breach involving Enstar (US) Inc. on December 19, 2023. The breach occurred between May 29, 2023, and May 31, 2023, and was due to unauthorized access by the criminal group known as 'CL0P' exploiting a zero-day vulnerability in the MOVEit Transfer tool. The specific number of affected individuals is 103 Rhode Island residents.

Source: https://ago.vermont.gov/document/2023-12-19-enstar-group-limited-progress-software-moveit-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/enstar-group-ltd

"id": "ens450072525",
"linkid": "enstar-group-ltd",
"type": "Breach",
"date": "5/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '103 Rhode Island residents',
                        'name': 'Enstar (US) Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Zero-day vulnerability',
 'data_breach': {'number_of_records_exposed': '103'},
 'date_detected': '2023-12-19',
 'date_publicly_disclosed': '2023-12-19',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Enstar (US) Inc. on December 19, 2023. The '
                'breach occurred between May 29, 2023, and May 31, 2023, and '
                'was due to unauthorized access by the criminal group known as '
                "'CL0P' exploiting a zero-day vulnerability in the MOVEit "
                'Transfer tool, though the specific number of affected '
                'individuals is 103 Rhode Island residents.',
 'references': [{'date_accessed': '2023-12-19',
                 'source': 'Vermont Office of the Attorney General'}],
 'threat_actor': 'CL0P',
 'title': 'Data Breach at Enstar (US) Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'MOVEit Transfer tool'}