The Russian ransomware group Clop claims to have stolen large volumes of data from nearly 50 companies worldwide, including Shell, Philips, Fiserv and General Electric, in what experts link to exploited zero-day vulnerabilities in engineering software tools.
Philips said it detected and contained an intrusion attempt targeting a specific internal data server, describing the incident as relatively small with no impact on customers. Shell said it is investigating a "possible incident" in cooperation with its security teams and outside experts. Fiserv said a comprehensive review found no evidence that customer, banking, transaction or personal data had been compromised.
Clop, which has been active since 2019 and is estimated to have collected around $500 million in ransom payments, is behind some of the most significant ransomware campaigns in recent years. The affected corporations continue to investigate potential data exfiltration.