Colleges across the U.S. — from Middlebury College in Vermont to the University of California, Los Angeles — say they’ve been swept up in the cyberattack exploiting a security vulnerability in Progress Software’s MOVEit service, which enables organizations to transfer large data files. Clop, a ransomware group, has taken responsibility for the attacks on the dark web, claiming to have stolen data from hundreds of organizations. Prior to Clop’s latest attacks, government officials estimated the group had compromised over 3,000 organizations in the U.S. — and even more based elsewhere.
