ICS STRIVE provides information on Threats, Vulnerabilities and Incidents in the manufacturing automation sector.Security Remains Everybody’s JobOT Threat Report: Physical Impacts Down, Nation-State Attacks on Rise2025 OT Cyber Threat Report2024 Threat ReportNext Filter by: Country AfricaAlbaniaAngolaArgentinaAsia-PacificAustraliaAustriaAzerbaijanBangladeshBelarusBelgiumBermudaBoliviaBosnia and HerzegovinaBrazilBritish Virgin IslandsBulgariaBurkina FasoCameroonCanadaChadChileChinaColombiaCosta RicaCroatiaCubaCuraçaoCzech RepublicDenmarkDominican RepublicEcuadorEgyptEl SalvadorEstoniaEuropeFinlandFranceGermanyGhanaGlobalGreeceGuadeloupeGuamGuatemalaGuyanaHondurasHong KongHungaryIcelandIndiaIndonesiaIranIrelandIsraelItalyJapanJordanKenyaKoreaLatviaLebanonLetlandLiberiaLibyaLiechtensteinLithuaniaLuxembourgMacedonia (Rep. of N.)MalaysiaMaltaMartiniqueMexicoMiddle EastNamibiaNepalNetherlandsNew ZealandNicaraguaNigeriaNorwayPakistanParaguayPeruPhilippinesPolandPortugalQatarReunion IslandRomaniaRussiaRussian FederationSaudi ArabiaSenegalSingaporeSlovakiaSloveniaSouth AfricaSouth AmericaSouth KoreaSpainSri LankaSt. MaartenSwedenSwitzerlandTaiwanThailandThe PhilippinesTrinidad & TobagoTurkeyUkraineUnited Arab EmiratesUnited KingdomUnited Kingdom of Britain & Northern IrelandUnited StatesUnknownVanuatuVenezuelaVietnam Industry AerospaceAutomotiveBiotechBuilding AutomationBusinessChemicalsCloud ProviderCommunicationsDefenseEnergy (Includes Power and Utilities)Engineering (Includes Industrial Construction)Food & BeverageGovernmentHealthcareInsuranceManufacturingMetalsMetals & MiningMiningOil & GasOtherPackagingPharmaceuticalPulp & PaperService ProviderSoftwareSteelTechnologyTransportation (Includes Logistics, Shipping, Maritime, Rail, Trucking)UnknownWater and Waste Water Threat Actor 8Base Ransomware GroupAiLock ransomware groupAkira Ransomware GangAndarielAnonymousAnonymous RoughSecAnonymous SudanAnubis Ransomware GroupAPT28AuroraBarracudaBelarusian CyberpartisansBianLian Ransomware GroupBl00dy 'bloody' Ransomware GangBlack Basta GroupBlack RewardBlack VineBlackByteBlackCat / ALPHVBlackjack groupBlackMatterBlackShrantacBlackSuitBlue LockerBrain CipherCactus ransomware gangCentral Scientific Research Institute of Chemistry and Mechanics (CNIIHM), RussiaCerber ransomware operationCicada3301 ransomware groupClop (or Cl0p) ransomware gangCold RiverConti groupCutting Sword of JusticeCyber Av3ngersCyber-PartisansDaixin TeamDark AngelsDarkSideDesordenDirewolfDoppelPaymer Ransomware GangDragonforceDunghill ransomware gangEmbargo Ransomware GangEverest Ransomware GroupFIN11Former EmployeeFulcrumSecGold DupontGunraHackers of Ukraine's military intelligence agency (HUR)HandalaHellcat ransomware gangHive Ransomware GroupINC RansomIndian Cyber Force (ICF)IndraIndustrial SpyInterlockIranIsrealIT Army of UkraineJoseph AtkinsKawa4096Killmilk/Just EvilKillnetKimsukyLapsus$LazarusLockBitLorenz ransomware gangLVLynx Ransomware GroupMedusaMoney Message ransomware gangMONTIMount LockerMysterious Team BangladeshNation State ActorNefilim Ransomware groupNempty Ransomware groupNetwalker GroupNevada Ransomware OperationNitrogenNobelium hacking groupNoEscape ransomware gangNoName057(16)PandoraPayloadPhoenixPlay, aka PlayCryptPredatory SparrowQilinRA WorldRagnar LockerRagnarok GroupRansomexxRansomHouse Extortion GroupRansomHub RaaSREvilRhysida Ransomware GroupRoyal Ransomware gangRussiaRussian Main Intelligence Directorate (GRU)Russian Security ServicesRyuk ransomware gangSafePay Ransomware GroupSalt TyphoonSandwormSarcoma GroupScatter Swine / 0ktapusScattered Lapsus$ HuntersScattered SpiderShinyHuntersSilent CrowSnatch ransomware groupSTIBNITESticky WerewolfStormStormous ransomware groupTeam Insane PKTeam OneFistTermiteThe GentlemenThe Hades ransomware gangTheUSERS007TimisoaraHackerTeam (THT)TrigonaUkrainian Cyber AllianceUNC2546UnconfirmedUnited StatesUnknownVexyVice SocietyVolt TyphoonWarlock Ransomware GroupWinntiWizard SpiderWorld Leaks, formerly Hunters InternationalWyatt A. TravnichekYanluowang ransomware groupZeroXZestix ImpactsOT (Operational Technology)IT (Information Technology)SafetyPrivacyBOTH OT and ITSearch Incidents: Cyberattack Shuts Down 14 Facilities at Largest Healthcare System in MI09/05/2023 McLaren HealthcareNo Malware identified BlackCat / ALPHVOT ITUnited StatesTargeted Cyberattack on Ukranian Critical Energy Infrastructure Facility09/05/2023No victims identified Phishing Attack APT28 ITUkrainePhishing Attack at Hershey Company Compromised PI of 2,214 people09/02/2023No victims identified Unknown phishing attackNo threat source identified ITUnited StatesTwo Major NY Hospitals Struggle to Recover from Lockbit Cyberattack09/01/2023 NY’s Carthage Area Hospital & Claxton-Hepburn Medical CenterNo Malware identified LockBit ITUnited StatesCrystal Manufacturer Baccarat S.A Experienced Cyberattack on Undisclosed Data09/01/2023 Baccarat S.ANo Malware identifiedNo threat source identifiedOT ITFranceRansomware Attack at Sri Lanka Government Wipes Months of Data08/30/2023 Sri Lanka GovermentNo Malware identifiedNo threat source identified ITSri LankaDutch Electromagnet Manufacturer Kendrion hit by Cyberattack08/29/2023No victims identifiedNo Malware identified LockBit ITGermanyNetherlandsPolish Railways Hack Paralyzed Freight and Passenger Trains08/26/2023 Poland Railway SystemNo Malware identifiedNo threat source identifiedOT ITPolandNetwork Monitoring Company Users Affected by Hacking Campaign08/24/2023 LogicMonitorNo Malware identifiedNo threat source identified ITUnited StatesAkira Ransomware Attacks Cisco VPN Network in Attempt to Breach Corporate Networks08/22/2023 CiscoNo Malware identified Akira Ransomware Gang ITUnited StatesRansomware Attack at Large Indian Paint Manufacturer, Kansai Nerolac.08/20/2023 Kansai Nerolac Ltd.No Malware identifiedNo threat source identified ITIndiaEnergy One Suffers Attack08/18/2023 Energy OneNo Malware identifiedNo threat source identified ITAustraliaParalyzing Cyberattack Hits Danish Cloud Service Companies08/18/2023 CloudNordic & Azero owned by Certiqa Ransomware – unknownNo threat source identified ITDenmarkWidespread Fallout after Lockbit Double Extortion Attack at Global Moving Services Provider, Sirva08/16/2023 Sirva Relocation, LLCNo Malware identified LockBit IT PrivacyCanadaUnited StatesCleaning Products Maker, Clorox, Suffers Attack08/14/2023 Clorox CompanyNo Malware identifiedNo threat source identifiedOT ITUnited StatesIndependent Businesses Suffer Big Hit as Result of Cyberattack on Swan Retail IT Firm08/13/2023 Swan RetailNo Malware identifiedNo threat source identifiedUnited KingdomLimited Operational Impact after Cyberattack at Copper Mining Company FCX08/11/2023 FCX (Freeport-McMoRan) Ransomware – unknownNo threat source identifiedOT ITUnited StatesRapattoni Cyber Attack has Significant Financial Impact on Real Estate Sector08/08/2023 Rapattoni Ransomware – unknownNo threat source identified ITUnited StatesCyberattack Suspends Clinical Activity in Madeira Health Service08/06/2023 Madeira Health Service (SESARAM)No Malware identified Rhysida Ransomware Group IT PrivacyPortugalZaun, a Fencing Supplier, Suffers Ransomware Attack08/05/2023 ZaunNo Malware identified LockBit ITUnited Kingdom123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102