Multinational energy corporation Shell and health technology firm Philips were targeted in a cyberattack by the ransomware group Cl0p, according to statements from the companies and the hacking syndicate.
Cl0p Ransomware Operation Targets Enterprise Infrastructure
The Cl0p ransomware operation claimed responsibility for the breaches on its dark web site, stating it stole large amounts of corporate data, according to reporting corroborated by Dutch media outlet BNR. Cl0p is known for developing and exploiting vulnerabilities in managed file transfer programs. Despite the group’s public claims posted on August 12, neither Shell nor Philips confirmed whether proprietary files were successfully exfiltrated during the incident.
The threat actors did not share data samples on their site and failed to respond to requests for comment sent to two email addresses listed as active on their platform, according to Reuters.
Philips Contains Enterprise Server Compromise
Royal Philips confirmed it was targeted by the Cl0p group, identifying an attempted cybersecurity compromise directed at a specific enterprise server linked to internal data operations, according to official statements. The company stated that its technical teams identified and contained the threat swiftly.
“Philips has identified and contained an attempted cybersecurity compromise of a specific enterprise server related to internal data,” the company stated, adding that customer environments remained entirely unaffected by the event. Cl0p claimed to have stolen roughly 13.5 gigabytes of data from Philips, including PDF drawings, diagrams, and blueprints, though the company did not verify the data theft claim.
Shell Investigates Possible Security Incident
Shell confirmed it was aware of a recent “possible incident” following reports from Dutch media outlet BNR.
“We are working with our security teams and relevant experts to investigate the situation,” a Shell spokesperson stated. Cl0p asserted on its website that it stole approximately 89 gigabytes of data from Shell, encompassing engineering drawings, photographs of facilities, scans of facility testing reports, and project plans. Shell has not verified the accuracy of the volume or nature of the files cited by the hacking group.
Frequently Asked Questions
Who is behind the cyberattacks on Philips and Shell?
The Cl0p ransomware group claimed responsibility for targeting both companies in statements published to its website on August 12.
What data did the hackers claim to steal?
Cl0p claimed to have stolen approximately 89 gigabytes of data from Shell—including engineering drawings and facility scans—and roughly 13.5 gigabytes of data from Philips, including blueprints and diagrams, according to public statements from the group.
Have the companies confirmed any data loss?
Related reading