CCleaner has admitted that hackers have stolen the names and contact information of some users in a major security breach.
It said that the attack exploited a flaw in the popular MOVEit file-transfer tool. This vulnerability first came to light in May when the Russian gang Cl0p used it to steal personal data of employees from over 2,500 companies and organisations around the world, including the BBC, Boots, British Airways and Transport for London.
In an email to affected users, which security expert Troy Hunt subsequently posted online (www.snipca.com/48230), CCleaner said some personal information had been “exposed on the dark web”.
It added that this information is “primarily limited to name and/or contact information, as well as information on the product you purchased from us”.
These details didn’t include passwords,…