Security News Logitech confirms data breach after Clop extortion attack

Gandalf_The_Grey

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Forum Veteran
Apr 24, 2016
7,738
6
81,344
8,389
54
The Netherlands
Hardware accessory giant Logitech has confirmed it suffered a data breach in a cyberattack claimed by the Clop extortion gang, which conducted Oracle E-Business Suite data theft attacks in July.

Logitech International S.A. is a Swiss multinational electronics company that sells hardware and software solutions, including computer peripherals, gaming, video collaboration, music, and smart home products.

Today, Logitech filed a Form 8-K with the U.S. Securities and Exchange Commission, confirming that data was stolen in a breach.

"Logitech International S.A. ("Logitech") recently experienced a cybersecurity incident relating to the exfiltration of data. The cybersecurity incident has not impacted Logitech's products, business operations or manufacturing," disclosed Logitech.

"Upon detecting the incident, Logitech promptly took steps to investigate and respond to the incident with the assistance of leading external cybersecurity firms."

Logitech says the data likely includes limited information about employees and consumers, as well as data relating to customers and suppliers, but the company does not believe hackers gained access to sensitive information such as national ID numbers or credit card information, as that data was not stored in the breached systems.
 
Thanks for sharing this, Gandalf_The_Grey.

It's concerning to see another big name like Logitech get hit, especially by a group as well-known as Clop. It looks like this was part of the wave of attacks targeting the Oracle E-Business Suite.

Key takeaways from the report:
  • Logitech confirmed a data breach where data was exfiltrated.
  • The company states the incident has not impacted its products, business operations, or manufacturing.
  • Data stolen likely includes limited information about employees, consumers, customers, and suppliers.
  • Fortunately, they believe sensitive information like national ID numbers or credit card details were not accessed, as this data wasn't stored on the breached systems.

Even if direct financial data wasn't stolen, the compromised information could still be used for sophisticated phishing attacks against employees or customers. It's a good reminder to be wary of any unexpected communications claiming to be from Logitech.