← iQor Global Services

2023 iQor Philippines — HMO vendor GoAnywhere / Cl0p nexus; ~22.5k employee and dependent notices

2023 22.5K records affected Share on X

Data compromised

Employee and dependent membership metadata tied to corporate HMO enrollment per NPC order summaries

Technical writeup

Philippines privacy regulators documented that iQor Philippines' benefits administrator Asalus (Intellicare) suffered Cl0p exploitation of Fortra GoAnywhere MFT, implicating employee and dependent eligibility records iQor processed. Intellicare issued staged statements acknowledging investigation by Mandiant and eventual confirmation of limited theft, while the NPC permitted coordinated notification leveraging the HMO's workflow.

Root cause

Zero-day-style exploitation of GoAnywhere MFT attributed in vendor and government paperwork to Cl0p activity

References