Cleaning product giant Clorox has filed a lawsuit against IT contractor Cognizant, alleging that help desk workers repeatedly handed over login credentials to hackers in a 2023 breach that caused $380 million in damages. The attack, enabled by ignored password policies and social engineering, crippled operations and exposes critical risks in outsourced IT security.