Clorox sues IT firm Cognizant over cyberattack, alleges hackers got passwords simply by asking

Core Viewpoint - Clorox has filed a lawsuit against Cognizant, alleging negligence in handling a cyberattack that resulted in significant financial damages due to a breach by the hacking group Scattered Spider in August 2023 [1][2][4]. Group 1: Cyberattack Details - The cyberattack was executed by Scattered Spider, which is known for tricking IT help desks into providing access credentials [1][6]. - Clorox claims that the hacker gained access by simply requesting passwords from Cognizant's support staff without any sophisticated techniques [2][3]. - The lawsuit includes transcripts of conversations where Cognizant staff reset passwords without verifying the hacker's identity [4]. Group 2: Financial Impact - The total damages from the cyberattack are estimated at $380 million, with approximately $50 million attributed to remedial costs and the remainder due to Clorox's inability to ship products to retailers [4]. - Clorox's operational recovery was further complicated by Cognizant's failures, such as not deactivating certain accounts and improperly restoring data [5].