Motivation: Financial; Reputational harm to target
Released datasets believed to originate from the MOVEit campaign, including employee data from large organizations. Public reporting frames it as a post-compromise leaker or distributor rather than the original intruder, so validate the role per dataset.
Targeting: secondary publication of MOVEit-stolen datasets. Validate role per dataset.
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Check your exposure privately, or request a tailored exposure audit.