Cybersecurity incident
Date: 2021-01-23 00:00:00
Affected organization: Kroger
Affected country: United States of America
Industry: Retail Trade
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: FIN11
Actor type: Criminal
Actor country: Russian Federation
Description: Supermarket giant Kroger has suffered a data breach after a service used to transfer files securely was hacked, and threat actors stole files. Kroger disclosed that they were the latest company to be affected by a security vulnerability in the Accellion FTA software that allowed hackers to steal data from companies utilizing the service.