Lawsuit says Clorox hackers got passwords simply by asking
Clorox was one of several major companies hit in August 2023 by the hacking group dubbed Scattered Spider, which specializes in tricking IT help desks into handing over credentials and then using that access to lock them up for ransom. The group is often described as unusually sophisticated and persistent, but in a case filed in California state court on Tuesday, Clorox said one of Scattered Spider's hackers was able to repeatedly steal employees' passwords simply by asking for them.
"Cognizant was not duped by any elaborate ploy or sophisticated hacking techniques," according to a copy of the lawsuit, opens new tab reviewed by Reuters. "The cybercriminal just called the Cognizant Service Desk, asked for credentials to access Clorox's network, and Cognizant handed the credentials right over."
Cognizant did not immediately return a message seeking comment on the suit, which was not immediately visible on the public docket of the Superior Court of Alameda County. Clorox provided Reuters with a receipt for the lawsuit from the court.
Three partial transcripts included in the lawsuit allegedly show conversations between the hacker and Cognizant support staff in which the intruder asks to have passwords reset and the support staff complies without verifying who they are talking to, for example by quizzing them on their employee identification number or their manager's name.
"I don't have a password, so I can't connect," the hacker says in one call. The agent replies, "Oh, ok. Ok. So let me provide the password to you ok?"
The 2023 hack caused $380 million in damages, Clorox said in the suit, about $50 million of which were tied to remedial costs and the rest of which were attributable to Clorox's inability to ship products to retailers in the wake of the hack.
Clorox said the clean-up was hampered by other failures by Cognizant's staff, including failure to de-activate certain accounts or properly restore data.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
North Wales Chronicle
21 minutes ago
- North Wales Chronicle
Meta stock surges after Q2 results beat expectations despite heavy AI spending
Shares in the Facebook owner surged more than 9% after-hours as a result. The California-based company earned 18.34 billion dollars in the April-June period. That is up 36% from 13.47 billion dollars in the same period a year earlier. Revenue jumped 22% to 47.52 billion dollars from 39.07 billion dollars. Meta said it expects costs to increase as it spends billions on infrastructure and luring highly compensated employees as it works on its artificial intelligence ambitions. It is forecasting 2025 expenses to be in the range of 114 billion dollars to 118 billion dollars, up 20% to 24% year-over-year.
Rhyl Journal
21 minutes ago
- Rhyl Journal
Meta stock surges after Q2 results beat expectations despite heavy AI spending
Shares in the Facebook owner surged more than 9% after-hours as a result. The California-based company earned 18.34 billion dollars in the April-June period. That is up 36% from 13.47 billion dollars in the same period a year earlier. Revenue jumped 22% to 47.52 billion dollars from 39.07 billion dollars. Meta said it expects costs to increase as it spends billions on infrastructure and luring highly compensated employees as it works on its artificial intelligence ambitions. It is forecasting 2025 expenses to be in the range of 114 billion dollars to 118 billion dollars, up 20% to 24% year-over-year.
The Independent
21 minutes ago
- The Independent
Microsoft's annual cloud revenue hits $75B, profit beats expectations
Microsoft said Wednesday that annual revenue for its flagship Azure cloud computing platform has surpassed $75 billion, up 34% from a year earlier. The Azure cloud business has been a centerpiece of Microsoft's efforts to shift its focus to artificial intelligence, but until Wednesday the company hadn't disclosed how much money it makes. The revelation came in the software giant's end-of-year earnings report. The company also said its fiscal fourth-quarter profit was $34.3 billion, or $3.65 per share, beating analyst expectations for $3.37 per share. It posted revenue of $76.4 billion in the April-June period, up 18% from last year. Analysts polled by FactSet Research had been looking for revenue of $73.86 billion. Microsoft launched Azure more than a decade ago, but the product has increasingly become intertwined with its AI ambitions, as the company looks to sell its AI chatbot and other tools to big business customers that are also reliant on its core online services. But building the infrastructure to power cloud and AI technology is expensive, and Microsoft has looked for savings elsewhere. It has announced layoffs of about 15,000 workers this year even as its profits have soared. Microsoft CEO Satya Nadella told employees last week the layoffs were 'weighing heavily' on him but also positioned them as an opportunity to reimagine the company's mission for an AI era. Still, the overall workforce numbers haven't changed. The company said it employed 228,000 full-time employees as of June 30, the exact same amount it reported a year ago, though slightly more of them are now U.S.-based and fewer of them are in product support roles or consulting services. Promises of a leaner approach have been welcomed on Wall Street, especially as Microsoft and other tech giants are trying to justify huge amounts of capital spending to pay for the data centers, chips and other components required to power AI technology. Google said after releasing its earnings last week it would raise its budget for capital expenditures by an additional $10 billion to $85 billion. Microsoft is expected to outline similar guidance soon. Microsoft didn't disclose Wednesday to what extent sweeping U.S. tariffs are affecting its revenue, but its annual report lists tariffs among a number of risks the company faces. 'Increased geopolitical instabilities and changing U.S. administration priorities create an unpredictable trade landscape,' the company said. It also said the "volatility of U.S. tariffs has triggered economic uncertainty and could impact cloud and devices supply chain cost competitiveness."
