August 11, 2020
In August 2020, Mount Locker ransomware gang targeted Engineering and Technology giant ThyssenKrupp in what appears to be a data breach. Threat actors gained access to critical HR information and documentation regarding the company’s present and past employees through the ThyssenKrupp Materials group of firms in the United States and Canada.
Mount Locker ransomware operators advertise what seems to be 30 MB of data related to ThyssenKrupp System Engineering group.
December 28, 2020
ThyssenKrupp Materials group of companies based in U.S. and Canada were a victim of a ransomware cyberattack. The attack lead to encryption of its servers and employee workstations. On December 28, 2020, were breached by the NetWalker ransomware group.
February 16, 2016
Technical trade secrets were stolen from the steel production and manufacturing plant design divisions of ThyssenKrupp AG in cyber attacks earlier n 2016. ThyssenKrupp was the victim of an economical espionage campaign carried out by hackers based in Southeast Asia. The company said the hackers’ goals were to breach its network and steal technological know-how and research from its industrial research branches.
December 20, 2022
German ThyssenKrupp AG said today that it’s fending off a cyberattack against its Materials Services division and corporate headquarters. The form of attack was not disclosed. The attack is said to have been noticed at an early stage by the company’s cybersecurity staff and efforts are underway to limit the attack and bring it to an end. No other sections of ThyssenKrupp have been affected by the attack.
No cybercriminal group has yet accepted responsibility for the attack.
June 27, 2022
Khuzestan Steel Co. (KSC) said the plant had to stop work until further notice “due to technical problems” following “cyberattacks.” The company’s website of the major Iranian steel companies was down on Monday.
Hacktivist group or also possibly nation state actor, Predatory Sparrow (Gonjeshke Darande) claimed responsibility. The attackers caused the foundry to spew hot molten steel and fire onto the factory floor, but not until workers had already cleared the area, unbeknownst of what was about to happen. The timing of their attack is deliberate.
A video captured during one of these attacks was shared on their social platforms as proof. It already has 200,000 views.
Predator Sparrow leaked “top secret documents and tens of thousands of emails” and “trading practices” from the steel makers they attacked. Only the hack on KSC resulted in a public acknowledgment of downtime. Not enough details or evidence avail. on MSC and HOSCO attacks.
September 15, 2020
Worldwide shut down of operations after cyberattack. The ransomware infection was discovered yesterday morning in one of Bluescope Steel’s United States-based businesses. The company had reverted to manual operations where possible, but some processes such as steel despatches were continuing as normal. Steelmaking at Port Kembla, Australia was continuing, however the hot strip mill was temporarily disrupted.