Cybersecurity incident — 2023-06-19 00:00:00
Affected organization: Fortra LLC
Affected country: United States of America
Industry: Information
Event type: Exploitive
Event subtype: Exploitation of Applilcation Server
Motive: Financial
Actor: cl0p
Actor type: Criminal
Actor country: Russian Federation

Approximately 16,000 members of Blue Cross Vermont health plans have their protected health information compromised in a January 2023 cyberattack carried out exploiting the CVE-2023-0669 zero-day vulnerability in Fortra's GoAnywhere MFT file transfer solution and accessed and stole sensitive data such as names, birth dates, addresses, medical information, and insurance information. Around 5% of the affected individuals also had their financial information stolen.