MOVEit (2023)

The MOVEit breach exploited a zero-day SQL injection flaw, compromising 2,700+ organizations and exposing 93.3 million individuals—over five times more victims than the SolarWinds supply chain attack, which affected 18,000 organizations. The Clop ransomware gang’s data exfiltration method exposed personal data in 94% of impacted entities, a rate 30% higher than typical ransomware incidents. This attack’s scale dwarfs the Facebook/Cambridge Analytica scandal in organizational impact, as MOVEit hit government and enterprise systems globally, with estimated costs exceeding $10 billion in recovery and litigation.