Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies

The Cl0p hacking group has claimed to have stolen significant data from nearly 50 companies, including Shell, Philips, General Electric (GE), and Fiserv. The group reported stealing approximately 89GB from Shell and 13.5GB from Philips, including sensitive engineering documents and project plans. The attacks exploit vulnerabilities in PTC Windchill and FlexPLM software, specifically a critical remote code execution vulnerability tracked as CVE-2026-12569. Both Shell and Philips confirmed attempts to breach their systems but have not verified the extent of the data theft. Fiserv and GE are also investigating the claims but have found no evidence of compromised customer data. The Ransomware Information Sharing and Analysis Center (Ransom-ISAC) issued warnings about the exploitation of these vulnerabilities as early as July 22, 2026. The situation remains under investigation as companies assess the potential impact.

Key Points: • Cl0p claims to have stolen data from nearly 50 companies, including Shell and Philips. • The attacks exploit vulnerabilities in PTC Windchill and FlexPLM, particularly CVE-2026-12569. • Both Shell and Philips are investigating the incidents but have not confirmed data theft.