ACCELLION BREACH SOFTWARE
ACCELLION BREACH FREE

Kroger says it is in the process of reaching out to affected customers and will provide free credit monitoring to anyone affected.Īnyone with questions about the incident should contact Kroger's call center at 1 (855) 558-2999 between 6 a.m. In February 2021, the agency confirmed it was one of a number of large organisations worldwide to fall victim to the attack against Accellion’s 20-year-old File Transfer Appliance, which saw some TfNSW information stolen. Kroger says, at this time, it has no indication of fraud or misuse of personal information as a result of this incident. Deemed one of the most sophisticated attacks in the last decade, the magnitude of the SolarWinds is yet to be fully understood. No credit or debit card data was stolen, but there is the potential risk of identity theft. Grocery pharmacies in other chains like Ralph's, Harris Teeter, and Fred Meyer stores may also have been involved in the breach. 'After being informed of the incident's effect on January 23, 2021, Kroger discontinued the use of Accellion's services, reported the incident to federal law enforcement, and initiated its own forensic investigation to review the potential scope and impact of the incident,' Kroger said.

ACCELLION BREACH SOFTWARE

Kroger said there was unauthorized access to a software they use called Accellion.Īccellion is a vendor that provides secure third-party data file transfer services to over 3,000 customers around the world, according to Kroger. Accellion discovered an attacker was taking advantage of a vulnerability in its large file transfer software (FTA) and notified its clients. The hack of software provider Accellion USA LLC has renewed security experts’ fears of attacks on suppliers and highlighted the difficulty of defending against them in real time. The cyber-attack affected NSW Ministry of Health, which held files using Accellion software. The breach did not impact grocery data, but could have involved personal health and insurance information used at the pharmacy. The leaked Stanford data is part of a massive data breach affecting numerous businesses and universities that targeted a widely-used file transfer service, Accellion, used by the University. and universities were among those affected by the breach. Supermarket chain Kroger is warning customers of a data breach in its Little Clinic pharmacy service. Key investors include Baring Private Equity Asia and Bregal Sagemount.

The company develops an enterprise content firewall leveraged by more than 3,000 global corporations, government organizations, hospitals and universities. The Clop ransomware gang, alternately known as Cl0p, also has begun posting what it claims are the Social Security numbers and home addresses of Flagstar employees on a dark web leak site designed to extort the bank into paying up.Kroger says the Accellion security breach did not impact grocery data, but could have involved personal health and insurance information used at the Little Clinic pharmacy. Accellions FTA Breached The bank reported in January that hackers had compromised Accellions File Transfer Appliance, which the central bank used to securely share large data files with. Accellion specializes in secure file sharing and collaboration software. “Unfortunately, we have learned that the unauthorized party was able to access some of Flagstar’s information on the Accellion platform and that we are one of numerous Accellion clients who were impacted,” Flagstar said in a notice on its website. The software flaw has led to breaches at firms around the world, with hackers exploiting the Accellion vulnerability to victimize grocery chain Kroger, cybersecurity company Qualys, the Reserve Bank of New Zealand, the state of Washington, prominent law firm Jones Day (which counts former President Donald Trump among its clients) and perhaps others. 22, Accellion, an IT provider, relayed that a vulnerability in its file sharing platform had affected Flagstar.

Michigan-based Flagstar Bank recently began notifying affected customers that on Jan. While Accellion fixed the zero-day vulnerability within 72 hours and said the breach affected ‘less than 50 customers’, the attack’s impact has expanded two weeks after the disclosure. The Accellion breach was first revealed by the California cloud solutions firm in January, who described it as a 0day. The Accellion hack has claimed another victim, this time a financial firm that boasts it’s the second-largest savings bank in the United States. It has come to our attention that The Office of the Washington State Auditor (SAO) recently had a data breach with the file transfer service Accellion.