Hitachi Energy confirms data breach after CL0P’s wave of GoAnywhere attacks

On Friday 17th of March 2023, Hitachi Energy, a department of Japanese engineering and technology giant Hitachi confirmed it suffered a data breach after the Clop ransomware gang stole data using a zero-day vulnerability (CVE-2023-0669) in the Fortra GoAnywhere MFT (Managed File Transfer), that was first disclosed on February 2023.

“We recently learned that a third-party software provider called FORTRA GoAnywhere MFT (Managed File Transfer) was the victim of an attack by the CLOP ransomware group that could have resulted in an unauthorized access to employee data in some countries,” Hitachi press statement.

Hitachi Energy confirmed that they had responded to the incident immediately, disconnected the impacted systems, and initiated an internal investigation to determine the impact. They also stated that all affected employees, applicable data protection authorities, and law enforcement agencies have been informed of the security incident directly.

Hitachi Energy date, we have no information that neither our network operations nor the security or reliability of customer data have been compromised,” assures the firm’s statement.

Furthermore, Hitachi Energy revealed that their current investigation has not found any evidence that either their network operations or the security or reliability of customer data have been compromised.