$PHG

Ransomware group Clop says it breached 43 organizations, naming Shell, GE, and Philips, by exploiting a PTC Windchill PDMLink and FlexPLM zero-day. Shell confirmed it is investigating a potential incident and said it is working with security teams. The exploited flaw is CVE-2026-12569 (CVSS 9.8), chained with a FlexPLM WSDL issue. PTC began patches June 17; CISA added the CVE to KEV on June 25.

Cl0p, a cybercrime group, claims it stole data from nearly 50 companies, including Shell, Philips, Fiserv and General Electric. Shell and Philips said they are investigating potential incidents; Fiserv said its probe found no evidence of customer or operational compromise. Cl0p alleges about 89 GB from Shell and 13.5 GB from Philips. Data theft amounts are not independently verified.

Cl0p ransomware hackers claim they stole data from nearly 50 companies, including Shell (about 89 GB), Philips (about 13.5 GB), GE and Fiserv. Shell and Philips said they are investigating or contained an attempted compromise. Fiserv reported no evidence of customer data theft. Reuters said the claims are unverified; Ransom-ISAC linked Cl0p to PTC Windchill and FlexPLM vulnerabilities.

Hackers calling themselves Cl0p claimed to have stolen large volumes of data from nearly 50 companies, including Philips, Shell, GE and Fiserv, according to a posting on the group’s website. Philips said it contained an attempted compromise of an enterprise server. Shell, GE and Fiserv said they are assessing and found no evidence of customer or transaction data impact. Reuters could not verify the claims.

Russia-linked ransomware group Cl0p says it hacked Shell and Philips, claiming it stole about 89 GB from Shell and 13.5 GB from Philips. Both companies said they are investigating. Philips reported it contained an attempted compromise on a specific enterprise server with no customer impact. Researchers linked the campaign to a Windchill flaw patched June 17.

Cl0p hackers claim a coordinated campaign stole data from about 50 companies, citing Philips, Shell, Fiserv and GE. Philips said it contained an attempted compromise with no customer impact. Shell is investigating a possible incident. Fiserv reported no evidence of compromised customer or transaction data. Ransom-ISAC says Cl0p exploited a PTC Windchill and FlexPLM vulnerability; PTC issued advisories. Reported theft claims include ~89 GB from Shell and ~13.5 GB from Philips.

Cl0p, a ransomware-linked hacking group, claims it stole data from Shell, Philips, GE and Fiserv, but Reuters said it could not verify the claims and none of the firms confirmed exfiltration. Trade reports cited about 89 GB from Shell and 13.5 GB from Philips. Philips, Shell, Fiserv and GE reported investigations or no customer-data impact.

A hacking group called Cl0p claimed on its website it stole data from nearly 50 international companies, including Philips, Shell, Fiserv, and GE, Reuters reported. Philips and Shell said they are investigating and contained an attempted compromise. Fiserv said its review found no evidence of customer or transaction data impact. GE said it is assessing. Reuters could not verify the claims.

Reuters reports a hacking group post claimed it stole large volumes of data from nearly 50 companies. Shell said it is aware of a possible incident and is investigating. Philips said it contained an attempted compromise of an enterprise server and that customer environments were not impacted. Fiserv and GE said they are assessing claims. Reuters could not verify details; Ransom-ISAC warned Cl0p exploited PTC Windchill and FlexPLM vulnerabilities.

Russian ransomware group Clop claimed cyberattacks on Shell and Philips, saying it obtained 89GB of Shell data and 13.5GB from Philips. Shell said it is investigating a potential incident. Philips said an attempted attack was contained to one internal server and customer environments were unaffected. Clop’s data volumes and contents are unverified.