Cybersecurity incident — 2023-07-12 00:00:00
Affected organization: Sovos Compliance
Affected country: United States of America
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: Clop
Actor type: Criminal
Actor country: Russian Federation

Sovos Compliance files a notice of data breach after discovering that MOVEit, the file transfer software used by Sovos, contained a critical vulnerability allowing an unauthorized party to download confidential consumer data provided to Sovos.