// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Clop
Threat Group Dossier

Clop

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Clop — 13 attributed incidents across our corpus.
Incidents on file13
First seen2023-05-31
Last seen2026-08-17
Top sectorFood

Techniques observed (MITRE ATT&CK)

T1195 Supply Chain Compromise (6)T1190 Exploit Public-Facing Application (5)T1486 Data Encrypted for Impact (2)

Sectors targeted

Food (2)energy (1)technology (1)IT services (1)media, aviation, retail (1)media (1)government (1)software (1)payroll (1)Education (1)

Attributed breaches

2026-08-17
supply chain
Shell
2025-11-21
unpatched cve
Oracle
2025-11-11
supply chain
GlobalLogic
2025-04-07
supply chain
WK Kellogg Co
2025-04-07
ransomware
WK Kellogg
2023-09-26
unpatched cve
MoveIt Transfer customers
2023-06-15
supply chain
MOVEit data-theft victims
2023-06-07
supply chain
BBC, British Airways, Boots
2023-06-07
unpatched cve
BBC
2023-06-06
supply chain
Nova Scotia government
2023-06-05
ransomware
MOVEit
2023-06-05
unpatched cve
Zellis
2023-05-31
unpatched cve
New York City Department of Education

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →