Cl0p exploited zero-day RCE in Fortra GoAnywhere MFT admin portal. ~130 organizations breached over 10 days in January 2023. Cl0p named 100+ victims on leak site through March 2023. Major victims: Hitachi Energy, Procter & Gamble, Rubrik, Community Health Systems, Hatch Bank, City of Toronto, Saks Fifth Avenue, Crown Resorts. Unusually, Cl0p did not deploy ransomware locker; pure data theft and extortion. Fortra initially shared advisory only with customers privately; Bleepingcomputer first reported publicly Feb 2.