// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Clop
Threat Group Dossier

Clop

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Clop — 12 attributed incidents across our corpus.
Incidents on file12
First seen2023-05-31
Last seen2025-11-21
Top sectorFood

Techniques observed (MITRE ATT&CK)

T1190 Exploit Public-Facing Application (5)T1195 Supply Chain Compromise (5)T1486 Data Encrypted for Impact (2)

Sectors targeted

Food (2)technology (1)IT services (1)media, aviation, retail (1)media (1)government (1)software (1)payroll (1)Education (1)

Attributed breaches

2025-11-21
unpatched cve
Oracle
2025-11-11
supply chain
GlobalLogic
2025-04-07
ransomware
WK Kellogg
2025-04-07
supply chain
WK Kellogg Co
2023-09-26
unpatched cve
MoveIt Transfer customers
2023-06-15
supply chain
MOVEit data-theft victims
2023-06-07
supply chain
BBC, British Airways, Boots
2023-06-07
unpatched cve
BBC
2023-06-06
supply chain
Nova Scotia government
2023-06-05
ransomware
MOVEit
2023-06-05
unpatched cve
Zellis
2023-05-31
unpatched cve
New York City Department of Education

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →