Clorox accuses IT provider in lawsuit of giving hackers employee passwords
Clorox was one of several major companies hit in August 2023 by the hacking group dubbed Scattered Spider, which specializes in tricking IT help desks into handing over credentials and then using that access to lock them up for ransom.
The group is often described as unusually sophisticated and persistent, but in a case filed in California state court on Tuesday, Clorox said one of Scattered Spider's hackers was able to repeatedly steal employees' passwords simply by asking for them.
"Cognizant was not duped by any elaborate ploy or sophisticated hacking techniques," according to a copy of the lawsuit, opens new tab reviewed by Reuters. "The cybercriminal just called the Cognizant Service Desk, asked for credentials to access Clorox's network, and Cognizant handed the credentials right over."
Cognizant, in an emailed statement, pushed back, saying it did not manage cybersecurity for Clorox and it was only hired for limited help desk services.
"Clorox has tried to blame us for these failures, but the reality is that Clorox hired Cognizant for a narrow scope of help desk services which Cognizant reasonably performed," Cognizant said.
The suit was not immediately visible on the public docket of the Superior Court of Alameda County. Clorox provided Reuters with a receipt for the lawsuit from the court.
Three partial transcripts included in the lawsuit allegedly show conversations between the hacker and Cognizant support staff in which the intruder asks to have passwords reset and the support staff complies without verifying who they are talking to, for example by quizzing them on their employee identification number or their manager's name.
"I don't have a password, so I can't connect," the hacker says in one call. The agent replies, "Oh, OK. OK. So let me provide the password to you OK?"
The apparent ease with which the hackers got what they wanted wasn't necessarily an indication that they weren't skilled, said Maxie Reynolds, a security expert who has specialized in social engineering and is not a party to the case.
"They just tried what typically works," she said.
Reynolds said the full transcripts were needed to offer a fair evaluation of what happened in 2023 but said that, "if all they had to do was call and ask straight out, that's not social engineering and it is negligence/non-fulfillment of duty."
The 2023 hack at Clorox caused $380 million in damages, the suit said, about $50 million of which was tied to remedial costs and the rest attributable to Clorox's inability to ship products to retailers in the wake of the hack.
Clorox said the clean-up was hampered by other failures by Cognizant's staff, including failure to de-activate certain accounts or properly restore data.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Reuters
11 minutes ago
- Reuters
Goldman, BNY team up to launch tokens tied to money market funds
July 23 (Reuters) - Goldman Sachs (GS.N), opens new tab and BNY (BK.N), opens new tab have joined hands to launch digital tokens that mirror shares of money market funds, deepening Wall Street's push to bring blockchain technology into traditional finance. Investors can now buy and sell money market fund shares on BNY's LiquidityDirect platform, with a digital record of those shares created on Goldman's blockchain system, the two financial giants said on Wednesday. The move marks an early step toward modernizing the infrastructure that underpins most of the financial ecosystem. If adopted broadly, it could make it easier and faster for institutional investors to use these assets as collateral and reduce trade settlement times. BlackRock (BLK.N), opens new tab, BNY Investments Dreyfus, Federated Hermes, Fidelity Investments and Goldman Sachs Asset Management are among the companies participating in the initial rollout. Though a subject of debate, tokenization's potential to drastically reshape the investing landscape has drawn strong interest. In January, Apollo (APO.N), opens new tabteamed up, opens new tab with Securitize to launch a feeder fund that would channel capital from crypto-native investors into its global credit fund. The moves coincide with surging optimism in the crypto industry, which has rallied in recent months and gained fresh momentum after the Genius Act passed earlier this month.
Reuters
11 minutes ago
- Reuters
Wall Street poised for higher open as US-Japan trade deal lifts sentiment
July 23 (Reuters) - Wall Street was poised for a stronger start on Wednesday after President Donald Trump struck a trade deal with Japan, shoring up expectations of further agreements ahead of the fast-approaching August 1 deadline. The pact will slash tariffs on the Japanese auto sector to 15% from 27.5%, with duties on other goods also dropping to 15% from 25%. At 8:24 a.m. ET, S&P 500 E-minis were up 22.5 points, or 0.35%, Nasdaq 100 E-minis were up 17.75 points, or 0.08%, and Dow E-minis were up 233 points, or 0.52%. Futures tracking the domestically focused Russell 2000 small-cap index (.RUT), opens new tab rose 0.9%. Representatives from Washington and the European Union were headed into negotiations, hoping to secure a breakthrough deal. At the same time, the European Commission declared plans to submit counter-tariffs on 93 billion euros ($109 billion) of U.S. goods for approval to EU members. "The United States has been working very hard on trying to get a lot of trade deals in time before the August 1st deadline, and it seems like they're starting to get some momentum. So I do think this is a very positive sign," said Chris Zaccarelli, chief investment officer at Northlight Asset Management. Meanwhile, the S&P 500 notched its eighth record close in a month on Tuesday, buoyed by easing trade tensions, a resilient U.S. economy, and upbeat second-quarter earnings. The Dow climbed 0.4%, now within striking distance of its all-time high, while the Nasdaq slipped as declines in Meta and Microsoft weighed on the tech-heavy index. Investors are now laser-focused on earnings from the "Magnificent Seven" — the market's star performers who have powered stocks to record highs. Tesla (TSLA.O), opens new tab and Alphabet (GOOGL.O), opens new tab are set to report after the bell on Wednesday. With AI optimism running high and valuations stretched, expectations for these tech giants are sky-high, leaving little margin for disappointment. Both the stocks eased about 0.3% premarket. In earnings-focused moves, Texas Instruments (TXN.O), opens new tab tumbled 9.9% after its quarterly profit forecast failed to impress investors, as it pointed to weaker-than-expected demand for its analog chips from some customers and underscored tariff-related uncertainty. The earnings also weighed on its peer analog chipmakers, with NXP Semiconductors (NXPI.O), opens new tab, Analog Devices (ADI.O), opens new tab and ON Semiconductor (ON.O), opens new tab falling between 3.1% and 5.4%. Automaker General Motors (GM.N), opens new tab also became a casualty of the trade war on Tuesday when it said Trump's tariffs took a $1.1 billion hit on its quarterly earnings, sending its shares down more than 8%. Toymaker Hasbro (HAS.O), opens new tab rose 0.5% after raising its annual revenue forecast, while AT&T (T.N), opens new tab slipped 3.4% despite beating quarterly profit estimates. In economic data, existing home sales numbers for June are due on the day. Thursday's weekly jobless claims numbers and S&P Global's flash PMI data will be closely assessed to gauge economic health in the wake of tariff uncertainties. Following a mixed set of economic data last week, traders have ruled out an interest rate cut by the Federal Reserve next week. Odds for a September reduction stand at 56%, according to the CME FedWatch tool. The Fed's July meeting will follow on the heels of mounting concerns about its independence amid political interference and President Trump's persistent attacks on Chair Jerome Powell for his reluctance to cut rates.
BBC News
14 minutes ago
- BBC News
Faisal Islam: Trump's tough tariff tactics is getting results
Japan is a big deal for President Donald Trump's upheaval of world's trading system. On his own terms, it could now be said that his aggressive approach is yielding tangible from the off, the US side has been talking up the chances of a deal with Japan, but despite several delegations, the deal had been strangely elusive - until a narrow sense, this is a win for the Trump approach, especially if Japan becomes the domino that leads the rest of the world to come into now has the best deal, or rather, the least worst deal, of all the nations with major trade surpluses with the US. The general tariff of 15% to be charged on Japanese goods being imported to the US is higher than the UK's 10%, but the UK has no I've reported before, the fury of the Japanese negotiators during talks was noted among Washington DC diplomats accustomed to the nation's extreme politeness. Tokyo was playing hardball. The Japanese finance minister described the nation's $1.1 trillion holding of US Treasury bonds, the largest in the world, as a "card" that could be put on the was rumours about hedge funds in Japan selling of US bonds following Trump's "Liberation Day" tariffs announcement in April that sparked a wider sell-off, and bigger questions over the world's biggest economy and safe haven status of the US the reaching of a deal matters hugely, in and of itself, and as an example to other major economic blocs, including the European Union (EU).The deal comes on the day the Japanese host EU leaders in Tokyo. There had been some chatter about Japan, the EU and Canada coordinating their retaliation. This stops any such initiative. Some members of the EU will wonder why a similar deal cannot be struck, at the very moment that Germany and France up the ante on retaliation, perhaps against the US tech world awaits the details here, but it is clear that Japan has protected its agricultural imports, though will import more US rice. It is unclear what can change the lack of popularity of large American cars in the country, though Japanese private companies will be backed to invest half a trillion dollars in the US, in some has done this deal when it might have waited out to see how things develop and international markets react when Trump's tougher tariffs for a host of countries come into force on 1 August. The domestic political weakness of its Prime Minister may have been a factor, though other countries, including Indonesia and the Philippines have also done big picture though is a weary acceptance of the US levying what would have been a year ago unthinkable tariffs on its major allies, for fear of something worse. In Japan's case it was a 25% tariff threatened by Trump. Tariff revenue rising for the US Tariffs are now raising significant sums for the US Treasury, without retaliation against US exporters. At over $100bn so far this year, about 5% of US federal revenue is coming from tariffs, versus 2% more typically. The US Treasury Secretary Scott Bessent thinks that the annual tariff take will be $300bn. It is way off the amount raised by income taxes, but a notable amount. It is being taken without direct retaliation and without right now the market turmoil seen the story does not end here. Who is actually paying these tariffs? Ultimately US consumers will pay a large part in terms of the prices they pay for imported the past Bessent and others have suggested that a rising value of the US dollar would help mitigate the cost of imports for consumers. The opposite has happened. The dollar has slumped in the first half of this year, losing 10% of its value against a basket of world currencies. This will add to the cost of imports, in addition to the is a wider canvas here too. The governor of the Bank of England Andrew Bailey said this week that "the most crowded trade in the market at the moment is 'short dollar'". He added that established safe haven patterns in markets, especially the US dollar, were "essentially breaking down". There is a "reduction of exposure" to the dollar as companies and traders now take out trades or "hedges" designed to ensure they are protected against its decline," the governor I've discussed before, there is suspicion in the markets that this weaker dollar may actually have been part of the point of these interventions, designed to help boost, for example, American rust-belt manufacturers regain top of that, the US has also helped its great rival China to at least make a case to the rest of the world, that it can be a more stable trade this first stage of the great global trade war, Japan is an important win for the White House, which will push back against the suggestion that "Trump always chickens out" or TACO. While it could also translate into more apparent wins ahead of next week's deadlines, driving further market euphoria, the broader economic picture remains far murkier.
