Clop claims theft of data from 43 companies via Windchill flaw
Clop claimed to have stolen data from many companies including Shell, Philips, GE and Fiserv. The attacks used a zero-day vulnerability in PTC Windchill and a custom web shell. Shell, Philips and GE investigated the claims, and the number of companies named as victims was later tallied at 43.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Claimed damage to 43 companies
- Cause / method
- Data theft using a PTC Windchill zero-day vulnerability and a custom web shell
- Location
- Other countries
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The attack group claimed to have stolen data from many companies including Shell, Philips, GE and Fiserv.
- Shell investigated a potential breach following Clop's claim of data theft.
- Philips and GE investigated Clop's claims of data theft.
- It emerged that the attacks used a PTC Windchill zero-day vulnerability and a custom web shell.
- The number of companies named as victims of Clop's PTC Windchill attack was tallied at 43.
9 related reports
- Hacking group claims mass data theft from Shell, Philips, GE, Fiserv and dozens of others
- Shell and Philips hit by Russian ransomware attack
- Shell investigates 'potential incident' after Clop data theft claims
- Philips and GE investigating Clop ransomware data theft claims
- Clop Claims Data Theft From More Than 40 Companies
- PLM Zero Day Flaw Exploited by Clop in Massive Data Breach
- Clop created custom web shell for Windchill data theft attacks
- Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
- Clop Ransomware Exploits PTC Windchill: 43 Victims [2026]
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.