INCIDENT EVIDENCE GRAPH

Clop ransomware targets Windchill, FlexPLM in data theft attacks

2026-07-24T07:36:39Z

The Clop ransomware gang (also tracked as Cl0p) is targeting Internet-exposed PTC Windchill and FlexPLM instances in a new data theft extortion campaign. [...]

• Victim: Organizations using exposed PTC Windchill and FlexPLM instances
• Actor: Clop ransomware gang (Cl0p)
• Method: Data theft extortion campaign exploiting Internet-exposed PTC Windchill and FlexPLM instances

Primary evidence

1. Clop ransomware targets Windchill, FlexPLM in data theft attacks

中文