Security News > 2023 > August > Clorox cleans up IT security breach that soaked its biz ops

The Clorox Company has some cleaning up to do as some of its IT systems remain offline and operations "Temporarily impaired" following a security breach.

Upon detection, we immediately took steps to stop the activity and took certain systems offline.

In other security breach news: the Colorado Department of Health Care Policy and Financing has notified more than 4 million people, primarily low-income health program patients, that their data may have been stolen by the Clop ransomware gang.

The department, which administers the US state's Medicaid and other health programs, is among the latest to be swept up in the massive MOVEit ransacking - although HCPF didn't use the Progress Software file transfer tool directly.

"No HCPF or State of Colorado systems were affected by this issue," according to a breach notification letter [PDF] from the dept.

Still, that's probably not much comfort to the 4,091,794 Health First Colorado and Child Health Plan Plus members whose information - including names, Social Security numbers, medical information, and health insurance information - may well have been accessed by the ransomware gang.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/08/15/clorox_cleans_up_security_breach/