Security News > 2022 > March > Shutterfly discloses data breach after Conti ransomware attack

Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack.
Today, Shutterfly disclosed that its network was breached on December 3rd, 2021, due to a ransomware attack.
According to Shutterfly's data breach notification, the Conti threat actor deployed the ransomware on December 13th, 2021, when the company first became aware that they were compromised.
"The attacker both locked up some of our systems and accessed some of the data on those systems. This included access to personal information of certain people, including you," reads Shutterfly's data breach notification filed with the California Attorney General's Office.
While Shutterfly's data breach notification did not shed much light on their attack, BleepingComputer broke the news in December that the company had suffered a Conti ransomware attack.
The Conti ransomware operation has released 7.02 GB of data they claim was stolen during the attack, including archives named for finance, legal, customer service, and payroll data.
News URL
Related news
- Marks & Spencer breach linked to Scattered Spider ransomware attack (source)
- Sensata Technologies hit by ransomware attack impacting operations (source)
- Ransomware attack cost IKEA operator in Eastern Europe $23 million (source)
- The quiet data breach hiding in AI workflows (source)
- Kidney dialysis firm DaVita hit by weekend ransomware attack (source)
- Hertz confirms customer info, drivers' licenses stolen in data breach (source)
- Hertz data breach: Customers in US, EU, UK, Australia and Canada affected (source)
- Landmark Admin data breach impact now reaches 1.6 million people (source)
- Ahold Delhaize confirms data theft after INC ransomware claims attack (source)
- Entertainment services giant Legends International discloses data breach (source)