Russian ransomware group Clop claims cyberattacks on Shell and Philips - NL Times

Image Shell - Credit: DarioSz / DepositPhotos - License: DepositPhotos CRIME TECH SHELL PHILIPS RANSOMWARE RUSSIAN HACKERS » MORE TAGS THURSDAY, 13 AUGUST 2026 - 18:04 SHARE THIS ARTICLE: Opens in a new window Opens in a new window Opens in a new window Opens in a new window Opens in a new window Opens in a new window Russian ransomware group Clop claims cyberattacks on Shell and Philips Russian hacking group Clop has claimed responsibility for attacks on Shell and Philips, although the extent of any damage remains unclear. Both companies confirmed that they had experienced a security incident after BNR reported on the claims. Shell says it is “aware of a potential incident.” According to a spokesperson, an investigation is currently underway “with security teams and relevant experts.” Philips describes the incident as “an attempted cyberattack on a specific company server containing internal data.” The healthcare technology company says the incident has since been brought under control. “This has no impact on customer environments,” a spokesperson added. Clop is a notorious ransomware group known for targeting businesses. Its attacks typically aim to steal sensitive data, which can then be used to pressure victims into paying a ransom. Cybersecurity platform GalaxyWarden, which monitors the dark web for potential data leaks, reports that Clop claims to have stolen 89 gigabytes of Shell data. The alleged haul includes technical drawings, images of company facilities, test report scans and project plans. Clop claims to have obtained 13.5 gigabytes of data from Philips, including files containing diagrams and blueprints. However, GalaxyWarden cautions that the information comes directly from the hackers and has not been independently verified. This is not the first time that Clop has targeted Shell. The ransomware gang targeted Shell in 2023 during the massive, global MOVEit Transfer data breach in May and June of 2023. Shell officially confirmed it had been impacted. Because Shell refused to engage or pay, Clop placed the company at the top of its dark web leak site and began publishing stolen files under the headline: "SHELL.COM DO NOT WANT TO NEGOTIATE - DATA POSTED !!!" Reporting by ANP and NL Times