Among the businesses targeted in the initial wave of attacks were Vimeo, the video-sharing company; Meetup, a company that connects groups offline; Basecamp, a project management software company; Bit.ly, the link-shortening service; Shutterstock, the stock photography agency, and MailChimp, the email marketing provider. In nearly every case, the amount demanded was typically low, in the $300 range. And in some cases, one security consultant said, the victims paid the ransom.
Among the companies targeted in just the last month have been Feedly, a service that aggregates web content; Evernote, the productivity service; and Moz, which makes marketing analytics software. On Thursday, Move, a San Jose, Calif. start-up that provides online real estate services, was added to the list.