Home - ICSSTRIVE

ICS STRIVE provides information on Threats, Vulnerabilities and Incidents in the manufacturing automation sector.

Security News

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

OT Security Incidents: 2021 Trends and Analysis

Ransomware Attack Strikes 49ers Football Team

Ransomware Attack at UK Snack Provider

Search Incidents

You Searched for: Term = | Country = | Industry =

No items found

Search Incidents

You Searched for: Term = | Country = | Industry =

Incident: Nikkei’s Singapore Publishing Unit Hit by Ransomware

Date: 05/13/2022

Victim(s):

Nikkei’s Singapore publishing unit

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Singapore

Incident: Ransomware Attack at AGCO

Date: 05/05/2022

Victim(s):

AGCO

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Kellogg Community College Open after Attack

Date: 04/29/2022

Victim(s):

Kellogg Community College

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Coca-Cola Hit in Cyberattack

Date: 04/24/2022

Victim(s):

Coca-Cola

Malware:

No Malware identified

Threat Source:

Stormous ransomware group

Country:

United States

Incident: German Wind Turbine Maker Hit in Cyberattack

Date: 03/31/2022

Victim(s):

Nordex

Malware:

Conti Ransomware

Threat Source:

No threat source identified

Country:

Germany

Incident: Parker-Hannifin Hit in Breach

Date: 03/11/2022

Victim(s):

Parker-Hannifin

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: German Subsidiary Of Russia’s Rosneft Hacked

Date: 03/11/2022

Victim(s):

Rosneft

Malware:

No Malware identified

Threat Source:

Anonymous

Country:

Germany

Incident: Auto Parts Supplier Suffers Ransomware Attack

Date: 03/10/2022

Victim(s):

Denso

Malware:

No Malware identified

Threat Source:

Pandora

Country:

Germany

Incident: Samsung Hit in Cyberattack

Date: 03/05/2022

Victim(s):

Samsung

Malware:

No Malware identified

Threat Source:

Lapsus$

Country:

South Korea

Incident: Ransomware Hits Snap-On Tool Maker

Date: 03/01/2022

Victim(s):

Snap-on

Malware:

Conti Ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Kojima Industries, a Toyota Supplier, Suffers Cyberattack

Date: 02/28/2022

Victim(s):

Kojima Industries

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Japan

Incident: Tire Manufacturer Bridgestone Hit in Ransomware Attack

Date: 02/27/2022

Victim(s):

Bridgestone

Malware:

No Malware identified

Threat Source:

LockBit

Country:

United States

Incident: German Wind Turbine Maker Enercon’s Services 90% Restored

Date: 02/24/2022

Victim(s):

Enercon

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Germany

Incident: Update on Viasat Cyberattack

Date: 02/24/2022

Victim(s):

Viasat

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Nvidia Suffers Cyberattack

Date: 02/23/2022

Victim(s):

Nvidia

Malware:

Ransomware

Threat Source:

Lapsus$

Country:

United States

Incident: Axis Communications Hit in Cyberattack

Date: 02/19/2022

Victim(s):

Axis Communications

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Sweden

Incident: Ransomware Hits 49ers Football Team

Date: 02/13/2022

Victim(s):

San Francisco 49ers Football Team

Malware:

BlackByte

Threat Source:

BlackByte

Country:

United States

Incident: Cyberattack Cuts Service for Vodafone Portugal

Date: 02/07/2022

Victim(s):

Vodafone Portugal

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Portugal

Incident: Ransomware Attack at Swiss Airport Services Firm

Date: 02/03/2022

Victim(s):

Swissport

Malware:

Threat Source:

BlackCat

Country:

Switzerland

Incident: German Oil Tank Farm Shut Down

Date: 01/29/2022

Victim(s):

Oiltanking

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Germany

Incident: UK Snack Provider Hit by Ransomware Attack

Date: 01/28/2022

Victim(s):

Kenyon Produce (KP) Snacks

Malware:

Conti Ransomware

Threat Source:

No threat source identified

Country:

United Kingdom

Incident: Oil Terminals In Europe Suffer Cyberattack

Date: 01/27/2022

Victim(s):

SEA-Tank Terminal

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Belgium

Incident: Albuquerque Hit in Cyberattack

Date: 01/12/2022

Victim(s):

Albuquerque Public Schools

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Chemical Maker Hit in Cyber Attack

Date: 01/05/2022

Victim(s):

Element Solutions Inc.

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Norway Media Company, Amedia, Hit in Cyberattack

Date: 12/28/2021

Victim(s):

Amedia

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Norway

Incident: Norwegian Food Producer Hit in Cyberattack

Date: 12/21/2021

Victim(s):

Nortura

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

Norway

Incident: Global IT Firm Recovering From Ransomware Attack

Date: 12/19/2021

Victim(s):

Inetum Group

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

France

Incident: Gas Supplier Hit In Ransomware Attack

Date: 12/12/2021

Victim(s):

Superior Plus Corp.

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Canada

Incident: Cloud Provider Hit in Ransomware Attack

Date: 12/11/2021

Victim(s):

Kronos Private Cloud (KPC)

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Photography Giant Hit In Ransomware Attack

Date: 12/10/2021

Victim(s):

Shutterfly

Malware:

Conti Ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: CS Energy Hit In Ransomware Attack

Date: 11/27/2021

Victim(s):

CS Energy

Malware:

Conti Ransomware

Threat Source:

No threat source identified

Country:

Australia

Incident: Wind Turbine Maker Hit in Cyber Attack

Date: 11/19/2021

Victim(s):

Vestas Wind Systems A/S,

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Denmark

Incident: Supernus Pharma Hit in Ransomware Attack

Date: 11/14/2021

Victim(s):

Supernus Pharmaceuticals, Inc.

Malware:

No Malware identified

Threat Source:

HiveLeaks Ransomware Group

Country:

United States

Incident: Ransomware Hits Store Fixture Manufacturer

Date: 11/13/2021

Victim(s):

Madix Inc.

Malware:

Unknown

Threat Source:

No threat source identified

Country:

United States

Incident: Panasonic Breached in Attack

Date: 11/11/2021

Victim(s):

Panasonic

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Japan

Incident: Barcelona’s Damm Brewery Ransomware Attack

Date: 11/09/2021

Victim(s):

Damm Brewery

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

Spain

Incident: Cyber Attack Damages CO Utility

Date: 11/07/2021

Victim(s):

Delta-Montrose Electric Association (DMEA)

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Acer Hit in Cyber Attack

Date: 10/16/2021

Victim(s):

Acer

Malware:

No Malware identified

Threat Source:

Desorden

Country:

Incident: Ransomware Strikes Candymaker

Date: 10/09/2021

Victim(s):

Ferrara

Malware:

Unknown

Threat Source:

No threat source identified

Country:

United States

Incident: Pharma Service Provider Hit in Cyber Attack

Date: 09/27/2021

Victim(s):

Ravkoo

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Weir Group Ransomware Incident

Date: 09/21/2021

Victim(s):

Weir Group

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United Kingdom

Incident: French Container Operator Hit By Attack

Date: 09/20/2021

Victim(s):

CMA CGM S.A.

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

France

Incident: Automotive Group Hit in Ransomware Attack

Date: 09/20/2021

Victim(s):

U.S.-based automotive group

Malware:

Colossus

Threat Source:

No threat source identified

Country:

United States

Incident: IA Ag Cooperative Hit In Ransomware Attack

Date: 09/17/2021

Victim(s):

New Cooperative

Malware:

BlackMatter

Threat Source:

BlackMatter

Country:

United States

Incident: Olympus Hit by Ransomware Attack

Date: 09/08/2021

Victim(s):

Olympus

Malware:

BlackMatter

Threat Source:

BlackMatter

Country:

Incident: Accenture Back Up After Ransomware Attack Report

Date: 08/11/2021

Victim(s):

Accenture

Malware:

LockBit

Threat Source:

LockBit

Country:

Global

Incident: Attacks Shuts South Africa Port Ops

Date: 07/22/2021

Victim(s):

Transnet

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

South Africa

Incident: Business Services Firm Hit in Ransomware Attack

Date: 07/20/2021

Victim(s):

Morley Companies Inc.

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Attack on Holiday at ME Wastewater Plant

Date: 07/04/2021

Victim(s):

Limestone Water and Sewer District

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Iran’s Rail Service Delayed with Fake Messages

Date: 07/02/2021

Victim(s):

Iran’s railroad system

Malware:

Hacker Attack

Threat Source:

No threat source identified

Country:

Iran

Incident: Supply Chain Attack Guidance Released

Date: 07/02/2021

Victim(s):

Kaseya

Malware:

No Malware identified

Threat Source:

REvil

Country:

Global

Incident: AL Utility Hit In Ransomware Attack

Date: 07/02/2021

Victim(s):

Wiregrass Electric Cooperative

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Hits MO City

Date: 07/02/2021

Victim(s):

City of Joplin, MO

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Saudi Aramco Data Breach

Date: 06/23/2021

Victim(s):

Saudi Aramco

Malware:

No Malware identified

Threat Source:

ZeroX

Country:

Saudi Arabia

Incident: VW, Audi Hit In Cyber Attack

Date: 06/11/2021

Victim(s):

Volkswagen and Audi

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: DoE Nuclear Subcontractor Suffers Cyber Attack

Date: 06/10/2021

Victim(s):

Sol Oriens

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Hits MA Ferry Service

Date: 06/02/2021

Victim(s):

Woods Hole, Martha’s Vineyard and Nantucket Steamship Authority

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Fujifilm Now Operating after Ransomware Attack

Date: 06/01/2021

Victim(s):

Fujifilm

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

Japan

Incident: Attack Shuts Operations of Global Meat Provider

Date: 05/30/2021

Victim(s):

JBS SA

Malware:

REvil

Threat Source:

No threat source identified

Country:

Incident: EU Packaging Maker, Ardagh Group Hit By Cyberattack

Date: 05/17/2021

Victim(s):

Ardagh Group

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Ireland

Incident: Insurance Carrier Suffers Ransomware Attack

Date: 05/16/2021

Victim(s):

AXA Partners

Malware:

Avaddon

Threat Source:

No threat source identified

Country:

Asia-Pacific

Incident: South Korea’s Atomic Agency Suffers Hack Attack

Date: 05/14/2021

Victim(s):

South Korean Atomic Energy Research Institute (KAERI)

Malware:

No Malware identified

Threat Source:

Kimsuky

Country:

South Korea

Incident: Toshiba Hit In DarkSide Ransomware Attack

Date: 05/13/2021

Victim(s):

Toshiba Tec Corp.

Malware:

DarkSide

Threat Source:

DarkSide

Country:

Incident: Tulsa cybersecurity attack similar to pipeline attack

Date: 05/08/2021

Victim(s):

City of Tulsa, Oklahoma

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Colonial Pipeline Ops Shut Down after Ransomware Attack

Date: 05/07/2021

Victim(s):

Colonial Pipeline

Malware:

DarkSide

Threat Source:

DarkSide

Country:

United States

Incident: Cloud Provider, DigitalOcean, Suffers Data Breach

Date: 04/09/2021

Victim(s):

DigitalOcean

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Attacks At ME Wastewater Plant

Date: 04/06/2021

Victim(s):

Mount Desert Wastewater

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: University of California Hit By Accellion-Based Ransomware

Date: 03/31/2021

Victim(s):

University of California

Malware:

Related to Accellion File Transfer Appliance (FTA)

Threat Source:

No threat source identified

Country:

United States

Incident: Honeywell IT Systems Hit in Cyberattack

Date: 03/23/2021

Victim(s):

Honeywell

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: ‘Sophisticated’ Attack Hits Cyber Insurance Provider

Date: 03/21/2021

Victim(s):

CNA Financial

Malware:

Phoenix Locker

Threat Source:

Phoenix

Country:

United States

Incident: Sierra Wireless Hit by Ransomware Attack

Date: 03/20/2021

Victim(s):

Sierra Wireless

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Canada

Incident: Data Leak At New England Energy Supplier, Eversource

Date: 03/16/2021

Victim(s):

Eversource

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Shell A Victim In Accellion Incident

Date: 03/16/2021

Victim(s):

Royal Dutch Shell

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: Major Brewer, Molson Coors, Hit By Cyberattack

Date: 03/11/2021

Victim(s):

Molson Coors Beverage Compay

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: DopplePaymer ransomware group claims plastics engineering and manufacturing company as victim

Date: 02/26/2021

Victim(s):

Ensinger

Malware:

DoppelPaymer

Threat Source:

DopplePaymer Ransomware Group

Country:

United States

Incident: World’s leading dairy group Lactalis hit by cyberattack

Date: 02/26/2021

Victim(s):

Lactalis Group

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: JFC International Ransomware Attack

Date: 02/25/2021

Victim(s):

JFC International (Europe)

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Germany

Incident: Jet Maker, Bombardier, Victim In Accellion Attack

Date: 02/23/2021

Victim(s):

Bombardier

Malware:

No Malware identified

Threat Source:

Country:

Canada

Incident: Oil Drilling Company, Gyrodata, Hit By Ransomware

Date: 02/21/2021

Victim(s):

Gyrodata

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Air India: Hack Leaked Passengers’ Data

Date: 02/21/2021

Victim(s):

Air India

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

India

Incident: Bolpegas attacked by Ragnar Locker Ransomware

Date: 02/18/2021

Victim(s):

Bolpegas SRL

Malware:

Ragnar Locker

Threat Source:

Ragnarok Group

Country:

Bolivia

Incident: French Boat Maker, Beneteau, Hit By Cyberattack

Date: 02/18/2021

Victim(s):

Beneteau

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

France

Incident: Turbomachinery manufacturer attacked with ransomware

Date: 02/15/2021

Victim(s):

Elliott Group

Malware:

Nefilim Ransomware

Threat Source:

Country:

Incident: Kia Motors Hit by Ransomware Attack

Date: 02/13/2021

Victim(s):

Kia Motors America

Malware:

DoppelPaymer

Threat Source:

DoppelPaymer ransomware gang

Country:

United States

Incident: Remote Access Leads To FL Water Supply Tampering

Date: 02/05/2021

Victim(s):

Oldsmar, Florida, water department

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: WestRock Provides Update on Ransomware Incident

Date: 02/04/2021

Victim(s):

WestRock

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Austria Crane Maker Under Attack

Date: 01/25/2021

Victim(s):

Palfinger Group

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Austria

Incident: Ransomware Attack on WestRock

Date: 01/23/2021

Victim(s):

WestRock

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Hacker Accessed CA Water Treatment System

Date: 01/15/2021

Victim(s):

San Francisco Bay Area Water Facility

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: FireEye Hit by Cyber Attack

Date: 12/08/2020

Victim(s):

FireEye

Malware:

No Malware identified

Threat Source:

Nation State Actor

Country:

Global

Incident: Home appliance giant Whirlpool hit in Nefilim ransomware attack

Date: 12/05/2020

Victim(s):

Whirlpool

Malware:

Netfilim

Threat Source:

Nefilim ransomware gang

Country:

United States

Incident: Ransomware Hits Vancouver’s TransLink

Date: 12/01/2020

Victim(s):

Translink

Malware:

Egregor

Threat Source:

No threat source identified

Country:

Canada

Incident: Security Provider, Stormshield, Hit In Cyber Attack

Date: 12/01/2020

Victim(s):

Stormshield

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

France

Incident: Foxconn Hit By Ransomware

Date: 11/29/2020

Victim(s):

Foxconn

Malware:

DoppelPaymer

Threat Source:

DoppelPaymer ransomware gang

Country:

Mexico

Incident: Jet Maker Hit By Cyber Attack

Date: 11/25/2020

Victim(s):

Embraer S.A.

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Brazil

Incident: OT Networking, Security Supplier, Belden, Attacked

Date: 11/24/2020

Victim(s):

Belden Inc.

Malware:

Not Known

Threat Source:

No threat source identified

Country:

Global

Incident: Advantech Hit By Ransomware

Date: 11/19/2020

Victim(s):

Advantech

Malware:

Conti Ransomware

Threat Source:

No threat source identified

Country:

Global

Incident: Biotech Firm Back Up After Malware Attack

Date: 11/16/2020

Victim(s):

Miltenyi Biotec

Malware:

Unknown malware attack

Threat Source:

No threat source identified

Country:

Germany

Incident: Ransomware Shuts Furniture Maker

Date: 10/22/2020

Victim(s):

Steelcase

Malware:

Ryuk ransomware

Threat Source:

Ryuk ransomware gang

Country:

United States

Incident: Energy company loses 5TB of data from encryption of ransomeware

Date: 10/19/2020

Victim(s):

Enel Group

Malware:

Mailto

Threat Source:

Netwalker Group

Country:

Europe

Incident: Water authority hit with Ryuk Ransomeware

Date: 10/10/2020

Victim(s):

Onslow Water and Sewer Authority (ONWASA)

Malware:

Ryuk ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Personal Information stolen and extortion attempt to Brasken facility

Date: 10/03/2020

Victim(s):

Braskem

Malware:

REvil

Threat Source:

No threat source identified

Country:

Brazil

Incident: Global Transportation company has multiple servers and intranet taken down by attack

Date: 10/01/2020

Victim(s):

International Maritime Organization

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: CMA CGM SA shutdown after attack with ransomeware

Date: 09/28/2020

Victim(s):

CMA CGM

Malware:

Ragnar Locker

Threat Source:

No threat source identified

Country:

Asia-Pacific

Incident: Maersk Ransomware Attack

Date: 09/27/2020

Victim(s):

Maersk

Malware:

NotPetya

Threat Source:

Russia

Country:

Global

Incident: Ransomware Attack Disrupting Operations

Date: 09/21/2020

Victim(s):

IPG Photonics

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Bluescope Shutdown of Operations

Date: 09/15/2020

Victim(s):

Bluescope

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: Spear-phishing attacks on Middle Eastern Oil & Gas companies

Date: 09/01/2020

Victim(s):

Unknown Oil and Gas companies in the Middle East

Malware:

Threat Source:

No threat source identified

Country:

Middle East

Incident: Carnival Data Breach

Date: 08/16/2020

Victim(s):

Carnival Corporation

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: Brown-Forman Cyber Attack

Date: 08/16/2020

Victim(s):

Brown-Forman

Malware:

REvil

Threat Source:

No threat source identified

Country:

United States

Incident: Mattel Hit By Ransomware Attack

Date: 07/28/2020

Victim(s):

Mattel

Malware:

Unknown ransomware variant

Threat Source:

No threat source identified

Country:

United States

Incident: Personal Information stolen and extortion attempt to Adif Transportation

Date: 07/23/2020

Victim(s):

Adif Transportation

Malware:

REvil

Threat Source:

No threat source identified

Country:

Spain

Incident: Hit By Ransomware, University of Utah Decides To Pay

Date: 07/19/2020

Victim(s):

University of Utah

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Winnti attack on Covestro

Date: 06/19/2020

Victim(s):

Covestro

Malware:

Winnti

Threat Source:

Winnti

Country:

Global

Incident: Knoxville Hit By Ransomware Attack

Date: 06/11/2020

Victim(s):

City of Knoxville, Tennessee

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Hack on Kawasaki Heavy

Date: 06/11/2020

Victim(s):

Kawasaki Heavy

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Thailand

Incident: Aussie Brewer, Lion, Production Hit After Ransomware Attack

Date: 06/09/2020

Victim(s):

Lion

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Australia

Incident: Honda Manufacturing Attack

Date: 06/09/2020

Victim(s):

Honda

Malware:

EKANS

Threat Source:

No threat source identified

Country:

Incident: Enel Group Internal IT Network Disruption

Date: 06/07/2020

Victim(s):

Enel Group

Malware:

Threat Source:

No threat source identified

Country:

Europe

Incident: Florence, AL, Hit By Ransomware, Decides To Pay

Date: 06/05/2020

Victim(s):

Florence, Alabama

Malware:

DoppelPaymer

Threat Source:

No threat source identified

Country:

United States

Incident: Agriculture water pumps attacked

Date: 06/01/2020

Victim(s):

Israel Water Authority, Upper Galilee, Israel

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Israel

Incident: Winnti attack on Marriott

Date: 06/01/2020

Victim(s):

Marriott

Malware:

Winnti

Threat Source:

Winnti

Country:

Global

Incident: Shahid Rajaee Port Terminal Maratime Attack

Date: 05/09/2020

Victim(s):

Shahid Rajaee Port Terminal

Malware:

No Malware identified

Threat Source:

Isreal

Country:

Iran

Incident: Fresenius Kabi Computer Virus

Date: 05/06/2020

Victim(s):

Fresenius Kabi

Malware:

SNAKE

Threat Source:

No threat source identified

Country:

Incident: Toll Group Cyber Attack #2

Date: 05/05/2020

Victim(s):

Toll Group

Malware:

Netfilim

Threat Source:

Russia

Country:

Australia

Incident: Cloud software provider, Blackbaud, falls victim to ransomware attack

Date: 05/01/2020

Victim(s):

Blackbaud

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Yashma Wind Park Spear Phishing Attack

Date: 04/16/2020

Victim(s):

Yashma Wind Park

Malware:

No Malware identified

Threat Source:

STIBNITE

Country:

Azerbaijan

Incident: EDP Ransom Attack

Date: 04/13/2020

Victim(s):

Malware:

Ragnar Locker

Threat Source:

Ragnarok Group

Country:

Portugal

Incident: Ransomware affects container shipments of global operations company

Date: 04/09/2020

Victim(s):

Mediterranean Shipping Company (MSC)

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: Chemical Company, Omnia Holdings, Suffered Cyber Attack

Date: 03/12/2020

Victim(s):

Omnia Holdings

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

South Africa

Incident: EVRAZ Infection

Date: 03/05/2020

Victim(s):

EVRAZ

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Incident: Visser, a parts manufacturer for Tesla and SpaceX, confirms data breach

Date: 03/01/2020

Victim(s):

Visser Precision

Malware:

DoppelPaymer

Threat Source:

No threat source identified

Country:

United States

Incident: MA Utility, Reading Municipal Light Department, Hit By Ransomware

Date: 02/21/2020

Victim(s):

Reading Municipal Light Department (RMLD)

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Natural Gas Compression Facility Spearfishing

Date: 02/18/2020

Victim(s):

Undisclosed – Oil & Gas

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: OT Pipeline Attack Shuts Down Compression Facility

Date: 02/18/2020

Victim(s):

Unnamed natural gas compression facility

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Emcor IT Systems Attack

Date: 02/15/2020

Victim(s):

Emcor

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Global

Incident: INA Group Cyber Attack

Date: 02/14/2020

Victim(s):

INA Group

Malware:

CLOP

Threat Source:

No threat source identified

Country:

Croatia

Incident: Toll Group has large portion of IT infrastructre taken out by ransomeware attack

Date: 01/24/2020

Victim(s):

Toll Group

Malware:

Mailto

Threat Source:

No threat source identified

Country:

Australia

Incident: Toll Group Cyber Attack #1

Date: 01/24/2020

Victim(s):

Toll Group

Malware:

Mailto

Threat Source:

No threat source identified

Country:

Australia

Incident: Railworks Data Breach

Date: 01/20/2020

Victim(s):

Railworks of North America

Malware:

CLOP

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Bites Defense Manufacturer, Communications & Power Industries

Date: 01/15/2020

Victim(s):

Communications & Power Industries (CPI)

Malware:

unknown ransomware, but unsegmented domain

Threat Source:

No threat source identified

Country:

United States

Incident: UK Airline, easyJet, Attacked; 9M Records Lost

Date: 01/01/2020

Victim(s):

easyJet

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United Kingdom of Britain & Northern Ireland

Incident: Airline Hit By Cyber Attack, Cancels Flights

Date: 12/22/2019

Victim(s):

RavnAir

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Hits Trucking Firm

Date: 12/20/2019

Victim(s):

Truckstop.com

Malware:

Ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware Takes Down Maritime Facility

Date: 12/16/2019

Victim(s):

Maritime Transportation Security Act (MTSA) regulated facility

Malware:

Ryuk ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Ryuk causes facility shutdown

Date: 12/16/2019

Victim(s):

No victims identified

Malware:

Ryuk ransomware

Threat Source:

No threat source identified

Country:

United States

Incident: Ransomware takes out Multiple PC Board facilities

Date: 12/13/2019

Victim(s):

Prototron Circuits

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Pemex Ransomware Attack

Date: 11/10/2019

Victim(s):

Pemex

Malware:

DoppelPaymer

Threat Source:

Joseph Atkins

Country:

Mexico

Incident: India Nuke Hit By Malware

Date: 10/29/2019

Victim(s):

Kudankulam Nuclear Power Plant (KKNPP)

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

India

Incident: Ransomware Attack: Automation Supplier, Pilz, Down

Date: 10/13/2019

Victim(s):

Pilz

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Germany

Incident: Attack on deep-draft vessel bound for the Port of New York

Date: 07/09/2019

Victim(s):

Port of New York

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Winnti malware infection

Date: 06/01/2019

Victim(s):

Covestro

Malware:

Winnti

Threat Source:

Winnti

Country:

Global

Incident: Norsk Hydro Production lines stopped

Date: 05/18/2019

Victim(s):

Norsk Hydro

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Norway

Incident: Ellsworth County Rural Water District Attacked

Date: 03/27/2019

Victim(s):

Ellsworth County Rural Water District

Malware:

No Malware identified

Threat Source:

Wyatt A. Travnichek

Country:

United States

Incident: Hexion/Momentive Global IT Outage

Date: 03/12/2019

Victim(s):

Hexion / Momentive

Malware:

Lockergoga

Threat Source:

No threat source identified

Country:

Incident: sPower CyberAttack

Date: 03/05/2019

Victim(s):

sPower

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Altran Technologies IT Shutdown

Date: 01/24/2019

Victim(s):

Altran Technologies

Malware:

Lockergoga

Threat Source:

No threat source identified

Country:

France

Incident: Nyrstar Ransomware Attack

Date: 01/22/2019

Victim(s):

Nyrstar

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Belgium

Incident: Personal Information stolen and extortion attempt to Austal Transportation

Date: 11/01/2018

Victim(s):

Austal

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Australia

Incident: Port of San Diego Maritime Event

Date: 09/25/2018

Victim(s):

Port of San Diego

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Port of Barcelona Maritime Incident

Date: 09/20/2018

Victim(s):

Port of Barcelona

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Spain

Incident: Roadrunner Transportation Systems

Date: 09/07/2018

Victim(s):

Roadrunner Transportation Systems

Malware:

No Malware identified

Threat Source:

Joseph Atkins

Country:

United States

Incident: China Ocean Shipping Company Terminal Maritime Incident

Date: 07/24/2018

Victim(s):

China Ocean Shipping Company Terminal

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Winnti attack on BASF

Date: 01/01/2018

Victim(s):

BASF

Malware:

Winnti

Threat Source:

Winnti

Country:

Germany

Incident: Winnti attack on Siemens

Date: 01/01/2018

Victim(s):

Seimens

Malware:

Winnti

Threat Source:

Winnti

Country:

Germany

Incident: Winnti attack on Henkel

Date: 01/01/2018

Victim(s):

Henkel

Malware:

Winnti

Threat Source:

Winnti

Country:

Germany

Incident: Winnti attack on Roche

Date: 01/01/2018

Victim(s):

Roche

Malware:

Winnti

Threat Source:

Winnti

Country:

Switzerland

Incident: Winnti attack on Shin-Etsu

Date: 01/01/2018

Victim(s):

Shin-Etsu

Malware:

Winnti

Threat Source:

Winnti

Country:

Japan

Incident: Winnti attack on Sumitomo

Date: 01/01/2018

Victim(s):

Sumitomo

Malware:

Winnti

Threat Source:

Winnti

Country:

Japan

Incident: Winnti attack on Lion Air

Date: 01/01/2018

Victim(s):

Lion Air

Malware:

Winnti

Threat Source:

Winnti

Country:

Indonesia

Incident: Winnti attack on Valve

Date: 01/01/2018

Victim(s):

Valve

Malware:

Winnti

Threat Source:

Winnti

Country:

United States

Incident: Safety Instrumented System is disabled by malware

Date: 12/01/2017

Victim(s):

Saudi Aramco

Malware:

Triton

Threat Source:

Central Scientific Research Institute of Chemistry and Mechanics (CNIIHM), Russia

Country:

Middle East

Incident: Merck Ransomware Attack

Date: 09/27/2017

Victim(s):

Merck

Malware:

NotPetya

Threat Source:

Russian Main Intelligence Directorate (GRU)

Country:

Global

Incident: Mondelez Ransomware Attack

Date: 09/27/2017

Victim(s):

Mondelez

Malware:

NotPetya

Threat Source:

No threat source identified

Country:

Global

Incident: AW North Carolina Hit in Ransomware Attack

Date: 04/01/2017

Victim(s):

AW North Carolina

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: German Nuke Infected with Malware

Date: 04/26/2016

Victim(s):

Gundremmingen plant run by the German utility RWE.

Malware:

Threat Source:

No threat source identified

Country:

Germany

Incident: Hackers cause power outages to close to 1/4 million people

Date: 12/23/2015

Victim(s):

Ukrainian Kyivoblenergo

Malware:

No Malware identified

Threat Source:

Russian Security Services

Country:

Incident: United Hack Connects To Attack Group

Date: 05/29/2015

Victim(s):

United Airlines

Malware:

No Malware identified

Threat Source:

Black Vine

Country:

United States

Incident: Attempted Cover-Up of Sewage Spillage

Date: 01/01/2015

Victim(s):

No victims identified

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Australia

Incident: Cyber attack at German Steel Mill damages equipment

Date: 03/18/2014

Victim(s):

German Steel Mill

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

Germany

Incident: Poughkeepsie, NY, Utility Hacked

Date: 02/19/2013

Victim(s):

Central Hudson Gas & Electric

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: FL Utility Suffers DDoS

Date: 02/17/2013

Victim(s):

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Security Firm Hacked

Date: 02/01/2013

Victim(s):

Bit9

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: 30,000 Hard drives wiped by virus

Date: 01/01/2013

Victim(s):

Saudi Aramco

Malware:

Shamoon

Threat Source:

Cutting Sword of Justice

Country:

Middle East

Incident: Computer Glitch Causes shutdown of 2 Amusement Park Rides

Date: 01/01/2012

Victim(s):

No victims identified

Malware:

No Malware identified

Threat Source:

No threat source identified

Country:

United States

Incident: Malware Targets Uranium Enrichment Facility

Date: 03/18/2010

Victim(s):

Natanz Nuclear Facility

Malware:

Stuxnet

Threat Source: