Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 30 JUNE 2023

Market Intelligence Thought Leadership Award Winner

The Cl0p Heist: Data Stolen In The MOVEit Zero-Day Attack Blitz

Mayer Brown
Mayer Brown
Contributor
Mayer Brown

Mayer Brown

Mayer Brown is a leading international law firm positioned to represent the world’s major...

View firm profile
Explore more from Mayer Brown

We have been closely following the Cl0p ransomware attacks, affecting dozens of organisations worldwide, and assisting clients worldwide with the fallout.

Hong KongTechnology
Gabriela Kennedy
Gabriela Kennedy
Tow Lu Lim
Tow Lu Lim
Author LinkedIn connections

We have been closely following the Cl0p ransomware attacks, affecting dozens of organisations worldwide, and assisting clients worldwide with the fallout.

Attackers have exploited a series of vulnerabilities in file sharing software MOVEit Transfer to steal sensitive data such as personal and financial information (e.g., national identity numbers and credit card data of customers) and the situation is unfolding rapidly.

The first vulnerability was discovered on 31 May 2023, but two more were found later. Because these are zero-day vulnerabilities, they were unknown to the vendor (Progress) and the public until they were exploited.

Progress released patches for all three vulnerabilities by 16 June 2023 but the damage has been done.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Visit us at mayerbrown.com

Mayer Brown is a global services provider comprising associated legal practices that are separate entities, including Mayer Brown LLP (Illinois, USA), Mayer Brown International LLP (England & Wales), Mayer Brown (a Hong Kong partnership) and Tauil & Chequer Advogados (a Brazilian law partnership) and non-legal service providers, which provide consultancy services (collectively, the "Mayer Brown Practices"). The Mayer Brown Practices are established in various jurisdictions and may be a legal person or a partnership. PK Wong & Nair LLC ("PKWN") is the constituent Singapore law practice of our licensed joint law venture in Singapore, Mayer Brown PK Wong & Nair Pte. Ltd. Details of the individual Mayer Brown Practices and PKWN can be found in the Legal Notices section of our website. "Mayer Brown" and the Mayer Brown logo are the trademarks of Mayer Brown.

© Copyright 2026. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

Preparing For The Crypto-Asset Reporting Framework And The Related Amendments To The CRS And AEOI Frameworks In Hong Kong

Hong Kong has introduced sweeping reforms to its automatic exchange of information framework, implementing both the OECD's Crypto-Asset Reporting Framework (CARF) and an enhanced Common Reporting Standard (CRS 2.0). These changes mandate registration for all reporting financial institutions, impose stringent due diligence requirements on crypto-asset service providers, and expand tax transparency to cover digital money products and crypto-related investment activities.
Hong KongTechnology
Withers LLP
Withers LLP
Article

CRS2.0制度评析——金融资产扩围、离岸架构穿透与全球税收透明新范式

Hong Kong's submission of CRS 2.0 amendment legislation in April 2026 marks a pivotal shift in global tax transparency, expanding coverage to crypto assets and strengthening beneficial ownership identification. How do these systematic upgrades address the structural deficiencies of CRS 1.0, and what challenges remain in achieving effective cross-border tax information exchange?
Hong KongTechnology
Jincheng Tongda & Neal
Jincheng Tongda & Neal
Article

Strengthening Cybersecurity Resilience In The Age Of AI: Key Takeaways From The Hong Kong SFC Circular

The Hong Kong Securities and Futures Commission has issued new guidance calling on licensed financial firms to strengthen their cybersecurity defenses against AI-enabled cyberattacks, as recorded incidents surge 27% year-over-year. The circular outlines five critical areas requiring immediate review and enhancement, from vulnerability management to incident response protocols, while emphasizing that senior management bears ultimate responsibility for cybersecurity risk in this rapidly evolving threat landsc
Hong KongTechnology
Mayer Brown
Mayer Brown
Article

DOL Announces Enforcement Actions Against Employers In H-1B And PERM Fraud Probe

The Trump Administration has launched an unprecedented enforcement action suspending permanent labor certification processing for eight major employers, linking immigration sponsorship to layoff histories and recruitment practices. This development signals a fundamental shift in how the government evaluates employer access to H-1B and green card programs, with investigations already underway and subpoenas served.
United StatesEmployment and HR
Mayer Brown
Mayer Brown
Article

Landmark DoorDash Settlement Confirms NYC DCWP’s Aggressive Enforcement Posture

New York City's Department of Consumer and Worker Protection secured a landmark $131.5 million settlement with DoorDash, marking the largest worker settlement in the city's history and the largest involving food delivery workers nationwide. The agreement provides over $115 million in direct compensation to more than 260,000 delivery workers who were underpaid, unpaid, or paid late, while establishing a comprehensive three-year compliance monitoring program.
United StatesEmployment and HR
Mayer Brown
Mayer Brown
Article

Trump Administration Announces New Enforcement Actions Against Employers In H-1B And PERM Fraud Probes

The Trump Administration has launched an unprecedented investigation into H-1B visa and PERM labor certification programs, with the Department of Labor's Office of Inspector General issuing dozens of subpoenas and suspending employers' ability to process applications. Federal agencies are deploying new enforcement tools including whistleblower programs and criminal prosecution threats...
United StatesImmigration
Mayer Brown
Mayer Brown
Article

EU’s CBAM Downstream Extension And Anti-Circumvention Amendments: The Road To Trilogue

The European Union's Carbon Border Adjustment Mechanism is undergoing critical legislative refinement as the Commission, Council, and Parliament have each established distinct positions on extending CBAM to downstream goods and strengthening anti-circumvention measures. With trilogue negotiations now underway and the first political trilogue scheduled for October 2026, significant divergences remain between the institutions on scope, exemptions, and enforcement mechanisms that will shape the final framework
European UnionEnvironment
Mayer Brown
Mayer Brown