CRITICALRansomware
Global

Clop gang targets Windchill, FlexPLM in data theft attacks

·Source: DataBreaches.net

Updated:

Executive Summary

Sergiu Gatlan reports: The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances. As cybersecur

Analysis

Sergiu Gatlan reports: The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. Clop has reportedly been exploiting a critical improper input validation vulnerability tracked as CVE-2026-12569, which allows attackers to execute arbitrary code on vulnerable Windchill and FlexPLM instances. As cybersecurity company... Source

Indicators of Compromise (1)

CVE (1)
CVE-2026-12569
NVDMITRE CVE
Source Attribution

Originally published by DataBreaches.net on Jul 24, 2026.

Related Threats

HIGHRansomware

Malware Attack Forces AnMed to Close Care Facilities

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/anmed-closes-care-facilities-as-deals-malware-attack-image_small-4-a-32336.jpg" align=right hspace=4><b>Nonprofit Health System in SC and Georgia Says Email, Phones and Portal Are Down</b><br>AnMed, a nonprofit healthcare system that serves upstate South Carolina and Northeast Georgia, has temporarily closed dozens of its medical

Bank Info Security
HIGHRansomware

Bank of Baroda Breach Tests Disclosure Readiness

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/bank-baroda-breach-tests-disclosure-readiness-image_small-6-a-32335.png" align=right hspace=4><b>Email Compromise Exposes Sensitive Data, Raising DPDP Act Compliance Questions</b><br>A Bank of Baroda employee email compromise exposed customer and internal data allegedly leaked by the Triple X ransomware group. The incident shows h

Bank Info Security
HIGHRansomware

FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown

An FBI agent explains how the mulitnational law-enforcement Operation Cronos was successful in disrupting the largest ransomware group of its time.

Dark Reading