In recent cybersecurity developments, Delta and Amazon have confirmed breaches involving employee data, attributed to vulnerabilities in the MOVEit file transfer tool exploited by cybercriminals. The threat actor, known as “Nam3L3ss,” has published stolen data, including employee names, contact details, and office locations on a dark web forum, impacting multiple organizations alongside Delta and Amazon. Both companies clarified that the breaches occurred through a third-party vendor and not from their own systems, nor did it involve sensitive personal information like Social Security numbers or financial data. The unnamed vendor has since patched the vulnerability. The MOVEit attacks, initiated by the Clop ransomware gang, began on May 27, 2023, exploiting a zero-day flaw in the MOVEit Transfer secure file transfer platform. This platform is widely used in enterprise settings for secure file transfers. The attacks have led to the exposure of approximately 96 million records from 2,773 organizations, including government agencies and Fortune 500 companies. The Clop gang has reportedly earned between $75 million and $100 million from ransom payments during this campaign. Nam3L3ss, who claims not to be a hacker but rather someone who acquires data from various insecure sources, has leaked data from twenty-five (25) major organizations, including Lenovo, HP, TIAA, Schwab, HSBC, McDonald’s, and Metlife. The individual expressed motivations of anger towards companies that fail to protect user information and cited a controversy involving a cybersecurity researcher in Columbus, Ohio, as a catalyst for their actions. Security experts have verified the legitimacy of the leaked data, which poses significant risks for phishing, identity theft, and social engineering attacks. CTIX analysts recommend companies affected by the MOVEit attack increase their security measures to help prevent further incidents and be vigilant of the risks posed by data leaks like these.