CCleaner, a maintenance and optimization tool that is very popular among Windows users (and of course they don’t only have the Windows version) has recently reported a data breach, and the hack has been officially confirmed, exposing a large amount of data of its paying users. According to reports, the problem was caused by a MOVEit vulnerability that was exploited by hackers in May, and the scale of affected users is currently unclear.
CCleaner was hacked again, emails and addresses were exposed
Gen Digital, the parent company of CCleaner, has recently been busy sending out email notifications to users, reminding them that bad actors who exploited the massive MOVEit vulnerability earlier this year retrieved a large amount of information about users from the repository. Unfortunately, we’re not sure how many people are affected, but it sounds like it’s a mess. This is not the first time CCleaner has been hacked, but it is not good news because the company confirmed that the leaked information included the names, contact numbers and billing addresses of paying users.
According to foreign media TechCrunch According to reports, Gen Digital would not reveal how many users were affected by the attack, but a spokesperson clarified that less than 2% of its nearly 65 million cybersecurity customers were affected. Despite this, CCleaner is still one of the most popular tools to date, with a very large number of users, which does not bode well for the average PC user. The MOVEit archive transfer tool hack was one of the biggest hacks of 2023, and it happened in May, so we’re not sure why CCleaner is only now starting to notify its user base.
The group behind this attack, Clop (Cl0p), has not commented much on CCleaner and does not list it on their dark web leak announcement page. So while the hacker group has not confirmed this information, Gen Digital did. Currently, the company is offering affected users six months of BreachGuard dark web monitoring software for free, and CCleaner will provide more details and how-to in the coming days.
If you want to know what to do when a data breach is involved, don’t be too nervous, because the data breach has already happened. However, it is still recommended to follow the security principles of Internet use, reset your password and stay vigilant at all times.
Source: KOCPC Chinese