Cybersecurity Alert: Major Data Breach Exposes Millions of Records in Global Supply Chain Attack A sophisticated supply chain attack has compromised a widely used software provider, exposing sensitive data for millions of users worldwide. The breach, detected in late June 2024, targeted MoveIt Transfer, a managed file transfer (MFT) solution developed by Progress Software, which is utilized by thousands of organizations across finance, healthcare, and government sectors. Attackers exploited a zero-day vulnerability (CVE-2024-5806) in the software, allowing unauthorized access to databases storing confidential files. The Cl0p ransomware gang has claimed responsibility, asserting they exfiltrated terabytes of data, including personal records, financial documents, and intellectual property. While Progress Software released a patch on June 25, 2024, delayed updates left many systems vulnerable, with breaches reported in North America, Europe, and Asia. The incident has triggered regulatory scrutiny, with authorities in the U.S. (CISA), UK (NCSC), and EU (ENISA) issuing advisories. Affected entities include U.S. federal agencies, British Airways, and the BBC, among others. The attack underscores the growing threat of supply chain exploits, where a single vendor compromise can cascade across multiple industries. Investigations remain ongoing to assess the full scope of the breach and potential secondary infections.