Federal Criminal Record investigation
MOVEit Transfer Mass Zero-Day Extortion Campaign

Mass cyber extortion campaign exploiting a zero-day SQL injection vulnerability (CVE-2023-34362) in Progress Software MOVEit Transfer appliances, exfiltrating personal records of over 90 million individuals across 2,700 organizations without encrypting files.

Loss Amount $1.2B
Techniques 3 Mapped
Threat Actor Individual