// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Zellis
Breach Record

Zellis

DISCLOSED 2023-06-05 · UNPATCHED CVE · RANSOMWARE

The Clop ransomware gang exploited a vulnerability in MOVEit Transfer to steal data. UK payroll provider Zellis confirmed it was breached via this attack. The incident occurred on June 5, 2023.

The record

What we know

Disclosed
2023-06-05
Attack vector
Unpatched Cve
Sector
payroll
Country
UK
RANSOMWARE
Sources

Cited reporting

↗ www.csoonline.com (2023-06-05)
Similar vector · recent

Other unpatched cve breaches on file

Trump Mobile · 2026-05-29 LexisNexis Legal & Professional · 2026-03-18 multiple organizations (Michelin, Mazda, Canon, Logitech, Harvard University, etc.) · 2025-11-28 Cox Enterprises · 2025-11-28 Oracle · 2025-11-21 Entrust · 2025-11-14 The Washington Post · 2025-11-13 managed service provider · 2025-05-28

This page is the permanent ColdRecon entry for the Zellis disclosure. It updates if new public reporting emerges. All tracked breaches →

Zellis just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →