Cleaning Products Maker, Clorox, Suffers Attack

August 16, 2023

INCIDENT

Clorox Company took down systems effecting business operations after a cyberattack hit the Oakland, California-based cleaning products manufacturer, company officials said.

The company said in a 10-Q report in February 2024 expenses to handle the hack were $49 million for the six-month period. They were $25 million for the first three months.

“The Clorox Company has identified unauthorized activity on some of its Information Technology (IT) systems,” The company said in an 8-K filing with the Security and Exchange Commission (SEC). “After becoming aware of the activity, the company began taking steps to stop and remediate the activity, including taking certain systems offline. “The Company is working diligently to respond to and address this issue, and is also coordinating with law enforcement. To the extent possible, and in line with its business continuity plans, Clorox has implemented workarounds for certain offline operations in order to continue servicing its customers."

In September, the company said some products were in short supply. Production remained an issue as operations have been slow to get back up to full speed. The company said it had been fulfilling and processing orders manually. The company said it expects to return to normal operations next week. “Clorox is still evaluating the extent of the financial and business impact. Due to the order processing delays and elevated level of product outages, the Company now believes the impact will be material on Q1 financial results."

In regulatory filings with the SEC, the company said the cyberattack “damaged portions of the Company’s IT infrastructure, which caused widescale disruption of Clorox’s operations.”

Incident Date

August 14, 2023

Estimated Cost

production impacted > month;

Type of Malware

No Malware identified

Threat Source

No threat source identified