Criminals That Hacked Klue are Deleting Stolen Data, While Others are Making Threats

Klue, a market research provider, was hacked in a breach, allowing cybercriminals to steal customer data. Icarus, the threat actor, has indicated that the process of the data being deleted is in progress since the Icarus site is down. These hackers used a 2022 third-party credential to steal customer OAuth tokens to log into their databases and systems. This group was threatening Klue at the time to release the stolen data, as an attempt to illegally obtain the company. However, another unnamed gang claimed they stole Klue's customer data from Icarus, but Icarus responded saying that the other group only has samples of data and that Klue customers shouldn't make a payment to them.