technology
Klue Says Hackers Stole Customer Data via Compromised Credential
TechCrunch reported that hackers accessed Klue systems using a compromised credential on June 12. Cybercrime group Icarus claimed responsibility and threatened to publish stolen data on Monday absent ransom payment. Multiple companies including Gong and Tanium confirmed data exposure.
techcentral.co.zaAudio version
Tap play to generate a narrated version.
Developing·Limited corroboration so far. This page will refresh as more sources emerge.
Market intelligence provider Klue disclosed that hackers breached its systems on June 12 using a compromised legacy credential tied to an integration tool, TechCrunch reported. The attackers stole data from an unspecified number of the Vancouver-based company's hundreds of corporate customers.
Cybercrime group Icarus claimed responsibility on its leak site and stated it would publish the stolen data on Monday if Klue does not pay the ransom.
Klue said it has engaged incident response firm CrowdStrike and disconnected its integrations to limit further access. Several customers confirmed their data was stolen, including Gong, Jamf, HackerOne, Insurity, OneTrust, Recorded Future, Snyk, Sprout Social, and Tanium.
Much of the exposed information consists of business contact details such as names, email addresses, phone numbers, job titles, and account information.
Klue CEO Jason Smith did not respond to TechCrunch's request for comment on Monday. The company does not currently list a person overseeing cybersecurity on its executive leadership page. Last June, Klue announced plans to lay off around half of its staff, approximately 100 people.
