FAQs
In August, Clorox identified a cybersecurity incident relating to some of our IT systems. After becoming aware of the activity, we immediately began taking steps to stop and remediate the activity, including taking certain systems offline. We implemented business continuity plans and began manual ordering and processing procedures shortly thereafter at a reduced rate of operations. We are continuing to operate at a lower rate of processing and have recently begun to experience an elevated level of consumer product availability issues.
Based on the information available to date, we believe the unauthorized activity is contained due to the steps the company has taken to address the incident. While the cybersecurity attack has caused widescale disruption of Clorox’s operations and damage to portions of the company’s IT infrastructure, we are making progress restoring operations and the systems that were taken offline. The investigation into the nature and scope of the incident with the support of third-party cybersecurity experts remains ongoing and is progressing.
Upon detection, we immediately took steps to stop the activity and took certain systems offline. While we are working diligently to respond to and address this issue, some operations are temporarily impaired. We are following our business continuity plans and implementing workarounds where possible. In addition, third-party cybersecurity experts have been engaged to support the investigation and recovery efforts. We are committed to servicing our customers and will continue to provide updates as we have more information to share.
Yes, we have notified law enforcement.
Yes – we have been operating at a lower rate of order processing, which has resulted in consumer product availability issues. That said, we began the process of transitioning back to normal automated order processing on Sept. 25, and are making good progress. All manufacturing sites are now operational, and we are ramping up production and working to restock trade inventories.
Beginning on Sept. 25th, we began the process of transitioning back to automated order processing and we are continuing to bring systems back online in a systematic process. All manufacturing sites are now operational, and we are ramping up production and working to restock trade inventories.
The investigation into the nature and scope of the incident with the support of third-party cybersecurity experts remains ongoing and is progressing. If we determine any sensitive data was affected, we will notify individuals as appropriate.