Klue hack results in data breach at several cybersecurity firms

Klue said it has called in incident response firm CrowdStrike, and has disconnected its integrations to prevent further access to customers’ data.

When contacted by TechCrunch on Monday, Klue CEO Jason Smith did not immediately respond to a request for comment, or answer questions about the incident, including if the company has received any communication from the hackers, such as a ransom demand.

Huntress, one of the security companies that had its data stolen in the hack, said in its write-up of the incident that the hackers had contacted it with a ransom note using an Australian company’s email address, whose servers were likely misused for the campaign.

Last June, Klue said it was preparing to lay off around half of its staff, around 100 people, as it doubled down on its AI investments. It’s not clear if the reduction in staff led to lapses in security at the company. It’s not clear who, beyond Smith, is responsible for cybersecurity at the company.

Klue does not currently list a person overseeing cybersecurity on its executive leadership page.

Do you know more about the Klue cyberattack? Are you a company affected by the breach? We would love to hear from you. To contact Zack Whittaker securely, reach out via Signal username zackwhittaker.1337 or by email: zack.whittaker@techcrunch.com.