Clop steals engineering data from Shell, GE and Philips through PTC Windchill

On August 14, 2026 Shell confirmed it is investigating a breach after Clop claimed it stole 89GB of data, including engineering drawings, through CVE-2026-12569 in PTC Windchill and FlexPLM. Exposed PLM teams need to check their instances and hunt for the JSP webshells dropped into the login directory.