Third-Party Attack Hits Hitachi Energy

March 24, 2023

INCIDENT

Hitachi Energy fell victim to an unauthorized access to employee data in some countries after an attack by the Clop ransomware group that leveraged a Zero Day vulnerability in a third-party software provider, Fortra GoAnywhere MFT (Managed File Transfer), company officials said.
The vulnerability exploited in the attack is CVE-2023-0669, a remote code execution flaw disclosed by Fortra on February 1, after attacks exploiting it were detected. The company issued a patch a week after discovery.

Incident Date

March 17, 2023

Location

Switzerland

Estimated Cost


No cost values disclosed.

Type of Malware

Threat Source

No threat source identified