Clorox suing Cognizant, says hackers got passwords just by asking, Reuters says

Clorox (CLX) is suing IT provider Cognizant (CTSH) (CSH) over a major cyberattack in 2023, claiming that the hackers were able to commit the intrusion simply by asking Cognizant’s staff for employees’ passwords, Reuters’ Raphael Satter reports. “Cognizant was not duped by any elaborate ploy or sophisticated hacking techniques,” according to a copy of the lawsuit reviewed by Reuters. “The cybercriminal just called the Cognizant Service Desk, asked for credentials to access Clorox’s network, and Cognizant handed the credentials right over.”