Shell has revealed a data breach after unknown parties managed to compromise the file sharing system associated with Accellion's File Transfer Appliance (FTA).
Shell is a multinational group of petrochemical and energy companies with more than 86,000 employees worldwide.
See also: Spot robot dogs are the new employees at Shell refineries
The attack did not affect Shell 's network.
Shell disclosed the attack in an announcement on its website last week, but said the hack only affected Accellion FTA, which is used to transfer large files.
See also: Flagstar Bank: Customer data breached via Accellion hack
“Upon learning of the incident, Shell remediated the vulnerabilities with its service provider and cybersecurity team and initiated an investigation to better understand the nature and extent of the incident,” Shell said.
"There is no indication of any impact on core IT systems Shell's," he said.
The company also informed the relevant authorities.
According to Shell, some of the data breached during the attack belonged to Shell partners and subsidiaries
“ Some contained personal data and others included data from Shell companies and interested parties ,” the statement said
The company has notified individuals affected by the Accellion hacking incident.
“Cybersecurity and privacy are important to Shell and we are constantly working to improve our risk management practices. We will continue to monitor our IT systems and improve our security. We regret any concern and inconvenience this may have caused“.
The Clop ransomware gang and the FIN11 group behind Accellion hacks
Shell did not provide information about the attackers, but a joint statement released by Accellion and Mandiant last month linked the hacks to the FIN11 hacking group.
Also, the Clop ransomware appears to have used a zero-day vulnerability in Accellion FTA to breach and steal company data.
See also: Bombardier: Clop ransomware group leaked company data!
According to Accellion, at least 300 customers used FTA software. Fewer than 100 fell victim to the Clop ransomware gang and FIN11.
Source: Bleeping Computer
