Cloox's Struggles After Cyberattack Blamed on Cognizant
Clorox Company (NYSE: CLX) has launched a lawsuit against its IT services partner, Cognizant Technology Solutions Corp (NASDAQ: CTSH), citing gross negligence and a severe breach of trust. This legal action was prompted by a recent cyberattack that not only disrupted Clorox's operations but also incurred nearly $380 million in damages.
What Went Wrong During the Cyberattack?
A significant factor contributing to the cyberattack was Cognizant's failure to uphold agreed-upon cybersecurity protocols. For over ten years, Cognizant managed Clorox's employee service desk, handling critical tasks like password recovery and credential resets. These responsibilities came with a mandatory requirement to authenticate all credential requests thoroughly.
Repeated Failures in Security Protocols
Despite a firm commitment to these security protocols, Cognizant allegedly neglected to perform the necessary checks, revealing serious vulnerabilities in their operations. On one occasion, a cybercriminal managed to contact the Cognizant-run service desk and gain unauthorized access to Clorox's network credentials without any proper authentication.
This grave lapse allowed the attacker multiple opportunities to infiltrate Clorox’s systems on that crucial day. Clorox asserts that recordings of these interactions confirm Cognizant's failure to verify the identity of the requester before providing sensitive information.
Consequences of the Cyberattack
The repercussions of this incident were dire. The cyberattack crippled Clorox’s corporate network, severely hindering its supply chain. The company faced substantial operational disruptions, reducing its capacity to fulfill customer orders effectively.
The Lawsuit Over Incident Management
According to Clorox's lawsuit, the initial mishandling of credential requests by Cognizant was just the tip of the iceberg. The company's subsequent responses, described as a botched incident management approach, only aggravated the situation. Clorox argues that Cognizant blatantly disregarded the clearly defined security measures that were supposed to guard against such attacks.
Clorox is adamant that effective compliance with internal security procedures could have prevented this breach. They emphasize that Cognizant's claims of having trained staff in security protocols turned out to be misleading, leading to what Clorox describes as a "devastating lie."
Financial Ramifications for Clorox
As a direct result of the attack, Clorox has incurred recovery costs exceeding $49 million, alongside hundreds of millions more owed to business interruption losses. While Clorox suffers significant financial harm, Cognizant announced revenue of $20 billion in the same year, suggesting that the incident has not negatively impacted its brand or financial health.
Current Market Situation for Cognizant
On a recent trading day, shares of Cognizant Technology Solutions saw an increase of 0.72%, closing at $77.34. The stock currently fluctuates within a 52-week range from $65.52 to $90.82, indicating a stable performance amidst the controversies surrounding the recent security breach.
Frequently Asked Questions
1. What led to Clorox's lawsuit against Cognizant?
Clorox's lawsuit is a result of alleged gross negligence and failure to follow cybersecurity protocols by Cognizant, which led to a major cyberattack causing significant financial damage.
2. What was the impact of the cyberattack on Clorox?
The attack severely disrupted Clorox's corporate network and supply chain, resulting in an inability to fulfill customer orders and incurring over $380 million in damages.
3. How did Cognizant respond to the accusations?
Cognizant has not yet publicly commented on the allegations made by Clorox regarding the mishandling of security protocols and the subsequent cyberattack.
4. What are the potential implications for Cognizant going forward?
Despite the lawsuit, Cognizant reported substantial revenue in the same year, suggesting that the impact on its brand and market standing may be minimal unless further issues arise.
5. How can such incidents be prevented in the future?
To avoid similar breaches, companies must ensure robust adherence to cybersecurity protocols, including comprehensive training for all staff in handling sensitive information and servicing requests securely.
