Security News > 2022 > March > Shutterfly discloses data breach after Conti ransomware attack

Shutterfly discloses data breach after Conti ransomware attack
2022-03-29 18:32

Online retail and photography manufacturing platform Shutterfly has disclosed a data breach that exposed employee information after threat actors stole data during a Conti ransomware attack.

Today, Shutterfly disclosed that its network was breached on December 3rd, 2021, due to a ransomware attack.

According to Shutterfly's data breach notification, the Conti threat actor deployed the ransomware on December 13th, 2021, when the company first became aware that they were compromised.

"The attacker both locked up some of our systems and accessed some of the data on those systems. This included access to personal information of certain people, including you," reads Shutterfly's data breach notification filed with the California Attorney General's Office.

While Shutterfly's data breach notification did not shed much light on their attack, BleepingComputer broke the news in December that the company had suffered a Conti ransomware attack.

The Conti ransomware operation has released 7.02 GB of data they claim was stolen during the attack, including archives named for finance, legal, customer service, and payroll data.


News URL

https://www.bleepingcomputer.com/news/security/shutterfly-discloses-data-breach-after-conti-ransomware-attack/