(Photo by Cesc Maymo/Getty Images)
Customer data from keyboard and mouse vendor Logitech has been stolen by hackers who breached a third-party software platform hosting the company’s information.
"The data likely included limited information about employees and consumers, and data relating to customers and suppliers,” the company warned.
It's unclear how many consumers were affected or what data was looted. But Logitech says it doesn’t appear that “any sensitive personal information, such as national ID numbers or credit card information, was housed in the impacted IT system.” The breach "has not impacted Logitech’s products, business operations or manufacturing," it adds.
(Credit: CLOP)The company reported the incident after Russia-linked ransomware gang "CL0P" claimed to have stolen data from Logitech earlier this month, telling the public: “The company doesn't care about its customers, it ignored their security!!!”
Clop appears to have stolen data by targeting a previously unknown vulnerability in Oracle’s business software, enabling the cybercriminal group to secretly breach at least a few dozen companies, including The Washington Post, starting in early August. The gang then tried to extort Logitech by threatening to leak the data unless the company paid up. Clop has since leaked at least some of the data, a 1.8TB archive, online.
Logitech declined to provide additional comment. But the company has said: “Upon detecting the incident, Logitech promptly took steps to investigate and respond to the incident with the assistance of leading external cybersecurity firms.”