// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Progress Software Corporation
Breach Record

Progress Software Corporation

DISCLOSED 2023-07-18 · UNPATCHED CVE

Progress Software's MOVEit Transfer file transfer platform was breached via a zero-day vulnerability. The Cl0p ransomware group exploited the flaw to access data from numerous organizations using the software. The incident affected thousands of governments, financial institutions, and other entities worldwide.

The record

What we know

Disclosed
2023-07-18
Attack vector
Unpatched Cve
Sector
technology
Country
US
Domain
progress.com
Sources

Cited reporting

↗ www.emsisoft.com (2023-07-18)
Similar vector · recent

Other unpatched cve breaches on file

Trump Mobile · 2026-05-29 LexisNexis Legal & Professional · 2026-03-18 Cox Enterprises · 2025-11-28 multiple organizations (Michelin, Mazda, Canon, Logitech, Harvard University, etc.) · 2025-11-28 Oracle · 2025-11-21 Entrust · 2025-11-14 The Washington Post · 2025-11-13 managed service provider · 2025-05-28

This page is the permanent ColdRecon entry for the Progress Software Corporation disclosure. It updates if new public reporting emerges. All tracked breaches →

Progress Software Corporation just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →