MOVEIt Cyberattack Case to Proceed With Some Claims Trimmed

Aug. 1, 2025, 7:49 PM UTC

The bellwether companies implicated in the massive 2023 MOVEit cyberattack and data breach failed to convince a federal judge to toss the consolidated case against them, although they did succeed in trimming some of the claims.

Across two orders Thursday in the multidistrict litigation, Judge Allison D. Burroughs largely rejected the defendants’ bids to dismiss negligence and breach of third-party-beneficiary contract claims.

But she dismissed invasion of privacy claims and issued mixed rulings on statutory, unjust enrichment, and negligence per se claims, depending on the defendant.

The sprawling cyberattack occurred in May 2023 when Russian hackers exploited vulnerabilities in Progress ...

Learn more about Bloomberg Law or Log In to keep reading:

See Breaking News in Context

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

Already a subscriber?

Log in to keep reading or access research tools and resources.