us-federal-government

The email addresses of over 632,000 US federal employees at the Departments of Defence and Justice were compromised by the Russian-speaking Clop ransomware organisation.

The MOVEit hacking effort that happened this summer is what led to the security breach.

The General Services Administration, the Department of Agriculture, and the Department of Health and Human Services were among the other US agencies that were the focus of the MOVEit campaign.

The affected employees worked for the Department of Justice as well as the US Army Corps of Engineers, the Air Force, the Joint Staff, the Office of the Secretary of Defence, and Defence Agencies and Field Activities.

Source: https://securityaffairs.com/153486/data-breach/clop-group-us-federal-employees.html

TPRM report: https://scoringcyber.rankiteo.com/company/us-federal-government

"id": "usf1147121123",
"linkid": "us-federal-government",
"type": "Ransomware",
"date": "11/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Defense',
                        'location': 'United States',
                        'name': 'Department of Defense',
                        'type': 'Government Agency'},
                       {'industry': 'Judicial',
                        'location': 'United States',
                        'name': 'Department of Justice',
                        'type': 'Government Agency'},
                       {'industry': 'Public Administration',
                        'location': 'United States',
                        'name': 'General Services Administration',
                        'type': 'Government Agency'},
                       {'industry': 'Agriculture',
                        'location': 'United States',
                        'name': 'Department of Agriculture',
                        'type': 'Government Agency'},
                       {'industry': 'Healthcare',
                        'location': 'United States',
                        'name': 'Department of Health and Human Services',
                        'type': 'Government Agency'}],
 'attack_vector': 'Phishing',
 'data_breach': {'number_of_records_exposed': '632,000',
                 'type_of_data_compromised': 'Email Addresses'},
 'description': 'The email addresses of over 632,000 US federal employees at '
                'the Departments of Defense and Justice were compromised by '
                'the Russian-speaking Clop ransomware organization.',
 'impact': {'data_compromised': ['Email Addresses']},
 'motivation': 'Financial Gain, Data Theft',
 'ransomware': {'ransomware_strain': 'Clop'},
 'threat_actor': 'Clop Ransomware Organization',
 'title': 'MOVEit Hacking Campaign by Clop Ransomware Organization',
 'type': 'Data Breach'}