Shutterfly, Warner Bros. Discovery, and AMC Theatres Among Victims of Cl0p Ransomware Group’s MOVEit File Transfer System Attacks

In recent news regarding cyberattacks, Shutterfly, Warner Bros. Discovery, and AMC Theatres have fallen victim to attacks by the Cl0p ransomware group on the MOVEit file transfer system. These companies have now joined the growing list of organizations affected by this notorious criminal gang. While the attacks have caused significant concern, Shutterfly has assured customers that no customer data has been compromised.

Shutterfly Confirms Impact, Assures Data Protection

Shutterfly, a popular online photo printing and personalized gift service, has confirmed its exposure to the MOVEit system attack. However, the company has confirmed that no customer data has been compromised in the incident. Acting swiftly, Shutterfly took immediate action to address the vulnerability, including temporarily taking its systems offline and implementing patches provided by MOVEit.

Thorough Investigation Clears Shutterfly of Data Breach Concerns

In response to the attack, Shutterfly conducted a thorough investigation with the assistance of a third-party forensics firm. The investigation’s findings revealed no evidence of consumer data or employee information being affected by the Clop ransomware group’s attack on the MOVEit file transfer system. This outcome provides reassurance to Shutterfly’s customers, who can feel confident about the security of their personal information.

Warner Bros. Discovery and AMC Theatres Join the List of Victims

The Clop ransomware gang has expanded its list of victims to include the major media company Warner Bros. Discovery and the renowned movie theater chain AMC Theatres. Both companies have been targeted by the group’s attacks on the MOVEit file transfer system. Cybernews has reached out to Warner Bros. Discovery and AMC Theatres for further comments regarding the incidents.

Exploitation of Zero-day Flaw in MOVEit System

The Cl0p gang successfully exploited a zero-day flaw in the MOVEit file transfer system, which is extensively used by numerous companies worldwide to securely transfer files. This vulnerability allowed the criminal group to gain unauthorized access to sensitive data and perform ransomware attacks, demanding significant sums of money for their release.

Extent of Impact: Other Affected Organizations

The Clop ransomware group’s attacks on the MOVEit system have impacted a multitude of prominent organizations. ING Bank, Deutsche Bank, and Postbank, as well as the Radisson Americas chain of Choice Hotels, have reported data loss due to the attacks this week. Additionally, companies such as Honeywell and Crowe accounting advisory firm have also fallen victim to the Clop gang’s ransomware activities.

Notable Victims and Prior Attacks

The list of victims affected by the Cl0p gang’s MOVEit attacks continues to grow. Noteworthy organizations such as PWC, Ernst & Young, Sony, Siemens Energy, the NYC Department of Education, and Shell Global have also suffered from the ransomware group’s exploits. It’s important to mention that the Cl0p gang was previously responsible for a zero-day attack on the Go Fortune Anywhere system earlier this year, affecting approximately 120 companies worldwide.

The Clop ransomware group’s attacks on the MOVEit file transfer system have had a significant impact on various organizations across different industries. While Shutterfly, Warner Bros. Discovery, and AMC Theatres have joined the growing list of victims, customers can take solace in the fact that no customer data was compromised during the incidents. The need to address vulnerabilities in systems and implement robust cybersecurity measures remains a top priority for businesses to protect themselves from such ransomware attacks in the future.

Explore more

Sui vs. Ethereum: A Comparison of Scaling and Architecture

The Move programming language used by Sui treats digital assets as resources to eliminate reentrancy bugs at the compiler level rather than through manual audits. This fundamental innovation has established a new benchmark for smart contract safety at a time when the decentralized economy is processing trillions in annual volume. In the current landscape, the industry is witnessing a sophisticated

Can macOS Successfully Run on Snapdragon Windows Laptops?

The Snapintosh project serves as a technical blueprint for running high-end Apple software on a diverse range of Qualcomm-powered devices and portable devices. This initiative marks a definitive moment in the computing landscape as enthusiasts successfully navigate the transition from Intel-based systems to the highly efficient ARM architecture. The convergence of hardware standards in 2026 has allowed for a renewed

Vertice Launches AI-Driven Procure-to-Pay Platform

Strategic spend management requires more than passive record-keeping, moving instead toward agentic AI that identifies and corrects financial discrepancies automatically. Vertice has successfully transitioned from a specialized procurement utility into a robust, end-to-end financial ecosystem through the launch of its integrated Procure-to-Pay platform. This development represents a significant milestone for the company, which previously focused on the Intake-to-Procure segment of

Anthropic Launches Claude Duet Proactive AI Agent for Work

As a dedicated productivity tool, Claude Duet focuses primarily on professional and operational workflows rather than the casual personal errands handled by traditional voice assistants. This shift represents a fundamental change in how software interacts with the human workforce, moving away from the static request-response cycle that defined the early era of generative intelligence. By operating on a persistent cloud-based

Closing the Privilege Gap With Idira Integrated Governance

The mover phase of an employee lifecycle often becomes a security black hole where old permissions are retained while new ones are added to the profile. This specific phenomenon, frequently referred to as privilege creep, creates a widening gap between the access an individual actually requires and the expansive permissions they technically possess. In the current cybersecurity environment of 2026,