Incident BriefingsUS Department of Energy security incident

US Department of Energy security incident

MOVEit/Cl0p. Data from DOE entities exposed.

Last modified

Summary

  • Environment: Federal government
  • Operational impact: Data from DOE entities exposed
  • Financial impact: No financial figure is established by the reviewed source evidence
  • Record status: Developing record. Reviewed September 19, 2026; updated as evidence emerges.

What happened

In 2023, US Department of Energy experienced an incident in its federal government environment. The retained source describes the attack path as follows: MOVEit/Cl0p. [1]

The documented consequence was: Data from DOE entities exposed. [1]

Impact

  • Documented impact: Data from DOE entities exposed. [1]
  • No financial loss, ransom amount, recovery cost, or regulatory penalty is established by the reviewed source evidence.

Timeline

  1. Documented public update

    The Two Energy Department entities breached as part of massive MOVEit compromise records the incident facts used in this briefing.

    [1]

  2. Briefing updated

    This briefing was last reviewed and updated on September 19, 2026.

Threat Group & Attack Vector

The retained source describes the attack path as follows: MOVEit/Cl0p. The canonical record does not add intrusion steps beyond those supported by the source. [1]

Actors

  • Cl0p — identified in the supported attack description. [1]

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

The retained source reports coordination with law enforcement as part of the incident response. [1]

This account is bounded to Two Energy Department entities breached as part of massive MOVEit compromise. Details absent from that evidence are left unresolved rather than inferred. [1]