Cybersecurity incident
Date: 2023-11-09 00:00:00
Affected organization: Allen & Overy
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Professional, Scientific, and Technical Services
Event type: Mixed
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: LockBit 3.0
Actor type: Criminal
Actor country: Undetermined
Description: Allen & Overy discloses to have suffered a "data incident", after social media posts suggested it had been hacked by the Lockbit cybercrime gang. According to rumors, the attack was carried out exploiting the CVE-2023-4966 Citrix Bleed vulnerability.