Hackers exploit PLM tools in attacks including Philips
Ransomware gang Clop says it breached manufacturers’ PLM systems by exploiting known input-validation flaws in PTC Windchill and FlexPLM (CVE-2026-12569). GE and Philips confirmed investigating breaches and data theft claims. Clop claims stealing backups and sensitive diagrams, blueprints and project plans from 43 companies, citing Shell, GE and Philips among them.