Documented incidentDisclosed 2023-08-14CloroxSEC filing

Cyberattack takes Clorox IT systems offline and forces manual order processing (2023)

Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.

The failure pattern

Insufficient segmentation lets a foothold spreadOne compromised account, vendor or network segment reaches management planes, backups and everything else.How to prevent it Destructive operation without verified recoveryA delete, cleanup or teardown runs against the wrong target, and the backups that should save the day turn out not to work.How to prevent it
Watch the pattern: Insufficient segmentation lets a foothold spread

Safeguards that address it

CollectSEA's engineering analysis of what would have prevented or contained this failure.

  • Keep a tested manual or offline fallback for orderingDefine and rehearse a degraded-mode path so orders keep flowing when the ERP is unavailable.
  • Immutable, restorable backupsKeep offline or immutable backups of ordering databases and run restore drills against recovery-time targets.

Related standards

CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.

Building something similar?

Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.

Analyze your design

Incidents with the same pattern