The individual is offering a dataset they claim to have exfiltrated from Wolters Kluwer's systems, touting it as a fresh and exclusive leak. This dataset, which reportedly ranges from 3GB to 6GB, is currently being auctioned, starting at $15,000, with the seller indicating they will only sell to one buyer.
“This kind of data can fuel highly personalized phishing campaigns and impersonation attempts,” researchers from Cybernews noted. The potential for social engineering attacks poses a significant risk, as this detailed personal information could enable cybercriminals to disguise themselves as company executives or customer service representatives. With this tactic, they could send fraudulent messages tailored to trick victims into divulging more sensitive information or credentials.
This isn't the first time Wolters Kluwer has confronted cybersecurity challenges. In 2019, the company suffered a malware attack that hindered client access to crucial databases, including those used for managing tax returns. That incident prompted increased scrutiny regarding the safeguarding of sensitive financial and tax information housed on the company’s cloud-based platforms.
In response to these claims, Wolters Kluwer has acknowledged the situation, confirming they are actively investigating the matter. “We are aware of this issue and are examining any potential data impact,” the company stated. “While our inquiry is ongoing, our preliminary review suggests that the data is limited to business contact details related to our health journals division. So far, there’s no indication that financial or tax data has been compromised, nor is there evidence of data impact linked to products outside this division.”
Even with this initial assessment, concerns linger due to the diverse clientele of Wolters Kluwer, including prestigious industries such as aviation, energy, and finance. Noteworthy customers include British Airways, Emirates, American Airlines, Boeing, Rolls-Royce, and BP. If the claims are validated, the breadth of the breach could have far-reaching implications.