Beauty Brand Estee Lauder Attacked by Two Groups of Ransomware Hackers, Company Data Leaked

Liputan6.com, Jakarta – Two ransomware hacker groups, ALPHV/BlackCat and Clop, claim to have pocketed the data brands Estee Lauder beauty. The perpetrator entered it into the data leak site as a victim of the attack.

In a message ostensibly dissatisfied with the company, BlackCat mocks Estée Lauder’s security measures, saying they still control the company’s network.

In a complaint to the Security Exchange Commission (SEC), as quoted from Bleeping ComputerSaturday (22/7/2023), Estee Lauder confirmed one of the attacks saying that a threat actor gained access to some of its systems and may have stolen the data.

However, the company did not provide detailed information about the incident. They only said they had acted proactively and removed some systems to prevent attackers from expanding the network.

“The investigation is ongoing with the support of leading third-party cybersecurity experts. We are also coordinating with law enforcement,” Claims Estee Lauder.

It appears that the Clop ransomware group gained access to the company after exploiting a vulnerability in the MOVEit Transfer platform for transfers files.

Threat actors started exploiting the vulnerability and claiming to have broken into hundreds of companies for data theft extortion.

On their data leak website, hacker Clop listed Estee Lauder with the simple message “Company doesn’t care about its customers, ignores their security!!!” The perpetrator claimed to have more than 131GB of company data.