Chemicals

Industry

Japanese Chemical Manufacturer Discloses System Failure due to Cyberattack

October 16, 2025

Kurogane Kasei, a chemical manufacturer and subsidiary of KH Neochem, revealed a system failure believed to be caused by a cyberattack. According to the company, it detected a possible breach of some of its servers on October 16, 2025. System failures have also occurred and are believed to be the result of this breach. The company is currently investigating the scope and cause of the impact, including the possibility of an information leak. The company denies that the outage has had any impact on production activities. RansomHouse claimed the cyberattack on October 23, 2025, and threatened to release sensitive data unless the company engaged in negotiations. The company has not confirmed who is behind the cyberattack.

read more

Hackers Compromised Systems of Belarus’ Largest Chemical Company

April 17, 2024

The hacker group “Cyberpartisans” claims to have hacked the computers and security systems of Belarus’ largest chemical company, Grodno Azot. The hackers promise to restore the data when the plant’s employees arrested during protests against the results of the 2020 presidential election, as well as 75 political prisoners with the worst health conditions, are released.

The hackers claim to have taken control of the company’s website, email, hundreds of work computers, servers, security systems, and surveillance cameras. The boiler room has also been disrupted.

The Grodno Azot website has been down since April 17. “The situation has not affected, and will not affect, the production activities of the enterprise,” the offical company said.

read more

Unauthorized Access at U.S. portal on Chemical Plant Security

January 23, 2024

Hackers may have accessed sensitive information about the nation’s chemical facilities during a cyberattack in January, the Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Monday June 24, 2024.

In March CISA confirmed that two systems were taken offline in response to the attack, which was conducted through a vulnerability in Ivanti IT products. It found no evidence that the hackers exfiltrated data but noted the intrusion “may have resulted in the potential unauthorized access” to site security plans, security vulnerability assessments (SVA), and user accounts within the CSAT system.

They also may have accessed “Top-Screen surveys,” which carry information on facilities, including the quantity and concentration of chemicals, their properties, and types of containers used to store them. The other documents held in the system covered how cyber and physical vulnerabilities were addressed by chemical facilities and what kind of alarms, barriers and cybersecurity controls are in place.

read more

Kurita America, Water Treatment Chemical Company, Hit By Ransomware

November 29, 2024

Japan’s Kurita Water Industries Ltd.’s Minnesota-based U.S. headquarters suffered a ransomware attack at the end of November, company officials said.
Kurita America Inc., a consolidated subsidiary in North America, found evidence of unauthorized access and ransomware infection on multiple servers.
On Friday November 29 at 3 p.m., there was an alert detected on KAI’s security monitoring system. At that time, the company conducted an investigation with external experts leading to the confirmation that multiple servers had experienced a ransomware attack and had been encrypted.

read more

Phishing Attack Dupes Orion Carbon Out of $60M

August 10, 2024

About $60 million was stolen from one of the leading suppliers of carbon products after an employee was tricked into making several wire transfers to cybercriminals. The funds were stolen from Orion, a Luxembourg-based company that produces carbon black, a material used to make tires, ink, batteries, plastics and more.

A spokesperson declined to explain the situation in detail but the company filed documents with the Securities and Exchange Commission (SEC) about the incident, which it discovered on Saturday.

read more

Hackers Paralyze only Newsprinting Facility in Switzerland

January 7, 2022

The machines at the Perlen paper factory in the Lucerne town of the same name are at a standstill due to a hacker attack. Newsprint and LWC production at Perlen and packaging production in Müllheim, Germany, which has been down since 7 January, restarted 6 days later on January 13. The chemistry division was not affected and was therefore able to continue production normally.

The factory normally outputs 1400 tons of newsprint paper per day. In a statement, the CPH Group said all IT systems were shut down on the 7th out of an abundance of caution and to contain any spread, strongly suggesting but not confirming they were a ransomware victim. They resumed production in January 13, after 6 days of downtime.

read more

Ransom Not Paid by Italian Chemical Producer Dollmar SpA

October 19, 2022

Ragnar Locker, hits the Italian chemical company Dollmar SpA. The hacking group leaked 35GB of data, including samples on the company’s letterhead, to make it clear that the data in its possession is real.

Publication on a data leak site generally occurs when the company has not paid the ransom.
no further updates.

read more

Chemical Distribution Company Brenntag paid $4.4M Ransom to Darkside Gang

April 28, 2021

Chemical distribution company Brenntag paid a $4.4 million ransom in Bitcoin to the DarkSide ransomware gang to receive a decryptor for encrypted files and prevent the threat actors from publicly leaking stolen data.

At the beginning of May 2021, Brenntag suffered a ransomware attack that targeted their North America division. As part of this attack, the threat actors encrypted devices on the network and stole unencrypted files. From the information shared with BleepingComputer by an anonymous source, the DarkSide ransomware group claimed to have stolen 150GB of data during their attack. To prove their claims, the ransomware gang created a private data leak page containing a description of the types of data that were stolen and screenshots of some of the files.

read more

Chemical Maker Hit in Cyber Attack

January 5, 2022

Fort Lauderdale, Florida-based Specialty chemical maker, Element Solutions Inc., suffered a cyber attack, company officials said Monday.
“Element Solutions recently detected a cyber intrusion on certain of the Company’s information technology systems,” the company said in a statement. “Upon detection of the incident, the company promptly took action to contain it and implement business continuity and data recovery protocols.”

read more

Global IT Firm Recovering From Ransomware Attack

December 19, 2021

Global IT services company, Inetum Group, suffered a ransomware attack December 19, impacting operations in France.
While the global company suffered the hit in France, its operations were ongoing in other parts of the world. Among the multiple sectors the company works with are energy and utilities, aerospace, automotive, and chemicals and life sciences. The company said none of the main infrastructures, communication, collaboration tools or delivery operations for its clients ended up affected.

read more