Financial services firms affected by the mass attack on MOVEit file-sharing software are among the latest to face lawsuits from affected individuals. One such lawsuit, filed against Prudential, wants the firm to pay for 10 years of identity theft monitoring service since stolen Social Security numbers cannot be replaced.

So far 998 organizations are known to have fallen victim to the attacks, based on public data breach notifications and as well as victims listed by Clop on its data-leak site, security firm Emisoft reports.