Makers Of MOVEit File Transfer Software Served With Class Action Lawsuit
The Clop ransomware gang has been pwning organizations right, left and centre via vulnerabilities in the MOVEit file transfer software. And with the scale of these attacks growing by the day, you knew it was a matter of time to before a lawsuit was filed. And now we have a class action lawsuit:
On June 20, three Louisiana individuals headed up a class-action lawsuit filed in a Massachusetts district court against Progress Software, the Bedford, Massachusetts, makers of the MOVEit file Transfer and Cloud file transfer service that are used by thousands of entities and have been exploited over the past month to compromise an ever-growing list of companies and government agencies.
The plaintiffs represent more than 100 individuals who say Progress Software’s security practices were negligent, resulting in their personal data being exposed and stolen through the hack. The complaint characterizes this information as “a gold mine for data thieves” and the victims are seeking damages in excess of $5 million.
One of the lead plaintiffs, Shavonne Diggs, reportedly received “numerous phishing calls” following the breach from scammers who claimed she had signed up to attend different academic institutions, as well as an unauthorized charge on one of her payment cards.
“Armed with the Private Information accessed in the Data Breach, data thieves can commit a variety of crimes including … opening new financial accounts in Class Members’ names, taking out loans in Class Members’ names, using Class Members’ names to obtain medical services, using Class Members’ information to obtain government benefits, filing fraudulent tax returns using Class Members’ information, obtaining driver’s licenses in Class Members’ names but with another person’s photograph, and giving false information to police during an arrest,” lawyers for the plaintiffs wrote.
The company hasn’t really addressed this lawsuit. Instead they said that they are focused on helping those affected by these attacks. But I think it’s a safe bet that this will never go trial. Instead Progress will likely settle this out of court. Having said this, the repetitional damage to Progress will be huge.
July 8, 2023 at 8:25 am
[…] are getting pwned because of the MOVEit Vulnerability continues to grow. And Progress who is being sued over this fiasco have made the announcement that it is going to a service pack […]