Pluralsight

Pluralsight is a technology company headquartered in the United States of America. The organisation operates within the technology sector, focusing on providing digital learning solutions. Its core offerings involve delivering online courses and training programs designed to develop skills in various technology domains. These services cater primarily to professionals and organisations seeking to enhance technical competencies, serving markets globally through its digital platform.

In March 2023, Pluralsight experienced a significant cybersecurity incident. The company was compromised by the Cl0p ransomware group, which exploited a previously unknown vulnerability, a zero-day, in Fortra's GoAnywhere Managed File Transfer (MFT) platform. Pluralsight publicly confirmed the breach occurred. Following notification, the company acted swiftly to mitigate the threat by immediately discontinuing its use of the compromised GoAnywhere service. Pluralsight asserted that its own products and core infrastructure remained unaffected by this attack. The company proactively communicated with customers who were potentially impacted, informing them about the risks to their data arising from the compromise of the third-party file transfer service. This incident highlighted the risks associated with supply chain vulnerabilities affecting third-party services utilised by organisations.