Clorox vs. Cognizant: The Cybersecurity Clash of 2023

Clorox has filed a lawsuit against IT provider Cognizant following a major cyberattack in 2023. The company alleges that hackers gained access to sensitive systems by simply asking Cognizant staff for passwords.

Described as sophisticated, the hackers, known as Scattered Spider, were able to compromise Clorox's network by exploiting vulnerabilities in IT help desk processes. Court documents claim that Cognizant support staff provided credentials without proper verification.

The $380 million breach has sparked a legal battle, with Clorox blaming Cognizant for failing to prevent unauthorized access and Cognizant denying its responsibility, stating its cybersecurity role was minimal.