Klue breach: Icarus claims data removal, second group blackmails customers

Colleagues, a cybersecurity alert: Klue has confirmed a breach and customer data exfiltration.

- Icarus claims to be deleting the stolen data; their site is offline. Meanwhile, a second group published an alleged victim list and is extorting customers.
- June 12 attack: attackers exploited an old third-party account (pilot 2022) and stole OAuth tokens.
- Klue urges customers not to pay the second group and to request random samples as proof.

Why it matters: compromised OAuth tokens provide cloud and database access and increase the risk of secondary leaks.

How would you respond in this situation?

#cybersecurity #incident #extortion #dataprotection