A ransomware group calling itself Clop claims to have carried out a cyberattack against Clover.com, with the claim dated August 12, 2026. This is an unverified claim made on the group’s own leak site, and it has been tracked by ransomware.live, a security research platform that monitors ransomware groups’ public extortion pages. Neither Clover.com nor any regulator has confirmed this claim, and BreachLetter has not independently verified it.
What we know — and don’t
- Clop, a known ransomware and extortion group, listed Clover.com on its leak site with a claimed date of August 12, 2026.
- Clover.com operates in the payment processing and point-of-sale technology space.
- The specific types of data the group claims to have obtained have not been disclosed on the listing and have not been confirmed by Clover.com.
- No independent forensic confirmation, regulatory filing, or statement from Clover.com is currently available.
- Claims made on ransomware leak sites are unverified by design and are sometimes exaggerated, incomplete, or entirely false; they should be treated as allegations, not established fact.
What should you do if you have an account with this company?
- Change your Clover.com account password, and avoid reusing that password on any other site or service.
- Turn on two-factor authentication (2FA) for your account if it is available and not already enabled.
- Be cautious of unexpected emails, texts, or calls claiming to be from Clover.com, especially any asking you to verify account details or click on links.
- Monitor your bank and card statements for unfamiliar transactions, particularly if you process payments through Clover.com.
- Consider using an identity monitoring service like a service like Aura or LifeLock to get alerted if your personal information appears in places it shouldn’t.
- Keep an eye on official communications from Clover.com in case the company issues a statement or notification regarding this claim.
BreachLetter will update this article if Clover.com confirms this incident, issues a public statement, or if the matter is reported to relevant data protection or financial regulators.