Hackers claim breach at Wolters Kluwer exposing sensitive customer info
Learn More
Dutch information services giant Wolters Kluwer, a company serving Fortune 500 clients across multiple industries, is investigating a possible data breach. A threat actor on a cybercrime forum is offering what they claim is a substantial dataset allegedly stolen from the company's systems.
Wolters Kluwer maintains an extensive client base that includes major corporations such as British Airways, Emirates, American Airlines, Boeing, Rolls Royce, and BP, as well as numerous accounting firms and financial institutions. Exposed data types include:
- Full names
- Email addresses
- Phone numbers
- Home addresses
- Employment information
- Educational backgrounds
- Social media accounts
- Social media tokens
The stolen database reportedly is between 3GB and 6GB in size. No details are disclosed about the nature of the attack and number of affected individuals.
The company has confirmed they are investigating the incident, their preliminary review suggests that the compromised information appears to be limited to business contact data from Wolters Kluwer's health journal division. The company has stated there is currently no evidence indicating that financial or tax data has been impacted, nor any evidence of data compromise associated with products outside of the health journals business.
The threat actor is reportedly seeking $15,000 for the exclusive sale of the dataset, claiming they intend to sell the stolen information to only one buyer
