Rochdi Rais reports:
The Clorox Company and its subsidiary, Clorox Services Co., today filed a $380 million lawsuit in California state court against Cognizant Worldwide Ltd. and its New Jersey affiliate, Cognizant Technology Solutions US Corp. The complaint alleges that Cognizant enabled a “catastrophic” cyberattack on Clorox’s corporate network in August 2023 by handing over sensitive employee passwords to hackers without proper verification.
According to the partially redacted 19-page complaint, hackers gained unauthorized access by simply calling the Cognizant service desk and requesting login credentials. The complaint states that Cognizant’s support agents repeatedly reset passwords and changed account phone numbers without authenticating the callers, allowing cybercriminals to bypass multiple cybersecurity defenses within hours.
Read more at USA Herald.