Russia-linked ransomware group Cl0p claimed it stole about 89 gigabytes of data from Shell and 13.5 gigabytes from Philips, including energy-facility blueprints, inspection reports, drawings and diagrams, but neither company has confirmed that any data was exfiltrated. Shell said it was investigating a possible recent incident with its security team and outside experts, while Philips said it identified and contained an attempted attack on specific corporate servers related to internal data and that customer environments were not affected. Cl0p did not disclose the attack method, publish sample files or respond to requests for comment. The group is known for exploiting file-transfer software vulnerabilities, including the 2023 MOVEit Transfer zero-day that hit more than 8,000 organizations, and the latest claims highlight the security and intellectual-property risks that double extortion attacks pose to critical infrastructure and healthcare companies.