// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / multiple organizations (US banks and universities)
Breach Record

multiple organizations (US banks and universities)

DISCLOSED 2023-06-15 · UNPATCHED CVE · RANSOMWARE

The Cl0p ransomware gang has begun listing victims of mass-hacks exploiting a vulnerability in the MOVEit Transfer file-transfer software. The initial victims include US banks and universities. The attacks are part of a widespread campaign leveraging the unpatched flaw.

The record

What we know

Disclosed
2023-06-15
Attack vector
Unpatched Cve
Sector
finance, education
Country
US
RANSOMWARE
Sources

Cited reporting

↗ techcrunch.com (2023-06-15)
Similar vector · recent

Other unpatched cve breaches on file

Trump Mobile · 2026-05-29 LexisNexis Legal & Professional · 2026-03-18 Cox Enterprises · 2025-11-28 multiple organizations (Michelin, Mazda, Canon, Logitech, Harvard University, etc.) · 2025-11-28 Oracle · 2025-11-21 Entrust · 2025-11-14 The Washington Post · 2025-11-13 managed service provider · 2025-05-28

This page is the permanent ColdRecon entry for the multiple organizations (US banks and universities) disclosure. It updates if new public reporting emerges. All tracked breaches →

multiple organizations (US banks and universities) just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →