Shell has confirmed it is investigating a potential security incident after the Clop gang claimed it stole 89GB of data, including engineering drawings, facility testing reports, photos, and project plans. The alleged theft is linked to attacks against Internet-exposed PTC Windchill and FlexPLM instances exploiting CVE-2026-12569, with Shell, General Electric, and Philips among the claimed victims. #Shell #Clop #PTC #Windchill #FlexPLM #CVE-2026-12569 #GeneralElectric #Philips
Keypoints
- Shell says it is investigating a potential security incident.
- Clop claims it stole 89GB of Shell data.
- The stolen files reportedly include engineering drawings and project plans.
- The attacks are tied to CVE-2026-12569 in PTC Windchill and FlexPLM.
- GE and Philips were also named as alleged victims in the same campaign.