Pulp & Paper Archives

Baillie Lumber Hit In Cyberattack

February 6, 2025

Hamburg, New York-based lumber supplier, Baillie Lumber Co., L.P., suffered a cyberattack this past February where personally identifiable information ended up stolen.
“On February 11, 2025, Baillie learned of suspicious activity within its network,” the company said in a letter to its victims. “Baillie immediately launched an investigation to determine the nature and scope of the activity. The investigation determined that an unauthorized actor gained access to certain files within the Baillie network from February 6, 2025 to February 12, 2025, and may have copied those files.”
Following an investigation, Baillie said it undertook a detailed review of all the files potentially impacted to determine what information was present in these files and to whom it related.

German Napkin Maker Insolvent after Ransomware Attack

May 19, 2025

German paper napkin manufacturer, Fasana, is now facing insolvency after a ransomware attack this past May disrupted all forms of operations at the company.
In a bit of irony, on May 19, Fasana’s entire printing infrastructure suddenly began producing ransom notes. In the attack, it appeared every laptop and desktop PCs ended up locked down. The next day, May 20, the company was unable to process orders worth over €250,000 ($287,467).
For nearly two weeks, Fasana was unable to: Print delivery notes or invoices, fulfill customer orders and process employee salaries.
In that short timeframe, the company suffered financial losses of over €2 million ($2.3 million). Dr. Dirk Wegener, the court-appointed insolvency administrator, said the company could not conduct basic business operations.

Operations Disrupted at BVI Electricity Corporation (BVIEC)

August 19, 2024

The BVI Electricity Corporation (BVIEC) was the victim of a cyberattack that affected its internal and external operations. The energy company works with experts and security agencies to solve the problem and restore normal operations. Despite this incident, BVIEC continues its efforts to restore electricity in the British Virgin Islands after the passage of tropical storm Ernesto

Third Largest Energy Distributor in Colombia hit by Cyberattack

September 2, 2024

The company is operating normally and the provision of energy services was not affected. A complaint was filed with the Public Prosecutor’s Office for the incident that occurred on September 2,

International Paper takes Mill Operations Offline after Cyberattack

February 22, 2024

International Paper is in the process of starting up its Riegelwood Mill after shutting it down due to a cyberattack, a company spokesperson said Thursday morning.

“Late last week, we experienced a cyberattack event on our operating systems at our mill in Riegelwood, N.C.,” IP spokesperson Kimberly Clewis wrote in a statement. “Thankfully, everyone at the mill is safe and there have been no environmental issues.”

The statement said that “out of an abundance of caution, we coordinated an orderly shutdown of the mill to resolve the issue and are in the process of starting up the mill.”

Clewis said the attacker accessed International Paper’s system through a third-party vendor “and did not directly target our company or mill. This event impacted only a limited set of manufacturing systems at the Riegelwood Mill. No other mills, locations or systems were affected.”

Hackers Shut Down Production at Cartonnerie Gondardennes in France

October 28, 2022

A cardboard box manufacturer in Wardrecques, France was hit by a cyberattack, most likely ransomware (Fr: “piratage”). Production was shutdown, and workers sent home. News reports are all in La Voix Du Nord which unfortunately is paywalled, but the headlines and synopsis says enough. The company’s systems were decrypted by a journalist, Damien Bancal, and ransom was not paid.

Hackers Paralyze only Newsprinting Facility in Switzerland

January 7, 2022

The machines at the Perlen paper factory in the Lucerne town of the same name are at a standstill due to a hacker attack. Newsprint and LWC production at Perlen and packaging production in Müllheim, Germany, which has been down since 7 January, restarted 6 days later on January 13. The chemistry division was not affected and was therefore able to continue production normally.

The factory normally outputs 1400 tons of newsprint paper per day. In a statement, the CPH Group said all IT systems were shut down on the 7th out of an abundance of caution and to contain any spread, strongly suggesting but not confirming they were a ransomware victim. They resumed production in January 13, after 6 days of downtime.

Virus Impacts Paper Machine HMI

January 1, 2004

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

Paper Company Control System Hit By Blaster

January 1, 2003

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.

DCS Console Reprogramming Causes Gateway Fault

January 1, 1998

WIZARD SPIDER is a sophisticated eCrime group that has been operating the Ryuk ransomware since August 2018, targeting large organizations for a high-ransom return. This methodology, known as “big game hunting,” signals a shift in operations for WIZARD SPIDER. This actor is a Russia-based criminal group known for the operation of the TrickBot banking malware that had focused primarily on wire fraud in the past.