Archive — US — techcrunch
Hacked Klue says criminals are deleting stolen customer data, but now otherhackers are making threats
Klue, a market research provider, confirmed a hack allowing cybercriminals, the group 'Icarus', to steal customer data. Icarus claims to be deleting the data, but another unnamed gang now threatens Klue's customers for ransom, claiming to have access to the stolen data. Klue advises affected customers not to pay the second group. The breach exploited a 2022 third-party credential to access client data.
Key points
- Klue was hacked on June 12, 2023, leading to the theft of data from several clients.
- Icarus claims they are deleting the stolen data and their website appears to be down.
- Another hacker group is threatening Klue's customers for ransom, claiming to have data from them.
- Klue communicated with customers about the situation and advised them to verify claims from the second group.
- The breach utilized a third-party credential from 2022 to access client data, raising questions about security.
Why it matters
- Cybersecurity breaches are increasingly prevalent, highlighting the importance of secure practices.
- The rise of ransomware attacks and extortion tactics by hackers remains a significant concern post-2020.
- In 2025, organizations are projected to prioritize zero-trust security frameworks and secure identity management to mitigate such threats.
The situation surrounding Klue's breach underscores ongoing vulnerabilities in cybersecurity, with emerging threats from multiple hacker groups. Klue's proactive communication and guidance to customers reflect an effort to manage the fallout while promoting cybersecurity awareness and resilience.