Who: Clorox, a cleaning products maker, suffered a damaging cyberattack in August 2023, leading to wide-scale disruptions, including order processing delays and significant product shortages.
What: The cyberattack has cost Clorox $49 million by the end of 2023, encompassing expenses related to disruptions and payments to third-party experts for investigation and remediation. The company anticipates incurring an additional $50-$60 million in costs in fiscal year 2024.
How: The cyberattack forced Clorox to shut down many systems, impacting sales and earnings. Although specific details of the attack remain undisclosed, the impact suggests it was likely a ransomware incident. The company has not recognized any insurance proceeds as of December 31, 2023, and it's unclear if corporate or customer information was compromised. The reported involvement of the BlackCat and Alphv ransomware group is yet to be confirmed, and despite law enforcement actions in December, the cybercriminals appeared undeterred.