Clorox has filed a lawsuit against Cognizant, alleging negligence that facilitated a 2023 cyberattack causing significant operational disruptions and financial losses. The incident was potentially linked to the Scattered Spider threat group, highlighting vulnerabilities in password recovery procedures. #ScatteredSpider #Cognizant #CloroxLawsuit
Keypoints
- Clorox accused Cognizant of providing inadequate support, enabling hackers to access its systems easily.
- The cyberattack disrupted Cloroxβs operations, leading to product shortages and financial damages.
- Hackers reportedly manipulated Cognizant support staff to reset passwords and multi-factor authentication without proper verification.
- Cognizant stated it was not responsible for Cloroxβs overall cybersecurity, emphasizing its limited scope of service.
- The incident underscores the importance of strict authentication procedures during support operations.
Read More: https://www.securityweek.com/clorox-sues-cognizant-for-380-million-over-2023-hack/