January 1, 2023

LockBit apologises with free decryptor after cyber attack against SickKids hospital

On Sunday 18th of December 2022, a teaching and research hospital in Toronto that focuses on providing healthcare to sick children, SickKids experienced a ransomware attack that impacted internal and corporate systems, hospital phone lines, and the website. The incident led to delays in receiving lab and imaging results and resulted in longer patient wait times. It was then revealed […]
December 30, 2022

Ransomware attack shuts down mill of Canadian mining firm

Late on Tuesday 27th of December 2022, The Canadian Copper Mountain Mining Corporation (CMMC) in British Columbia experienced a cyberattack that resulted in the CMMC’s engineers decided to shut down the mill as a preventative measure to determine the status of its control system, while other processes switched to manual operations. “The Company’s external and internal IT teams are continuing […]
December 30, 2022

Cyber attack on the Port of Lisbon Administration claimed by the LockBit ransomware operation

On Monday 26th of December 2022, the third-largest port in Portugal, the Port of Lisbon Administration (APL) shared with local media outlets that they had experienced a cyber attack that did not impact their operations. “All safety protocols and response measures provided for this type of occurrence were quickly activated, the situation being monitored by the National Cybersecurity Center and […]
December 28, 2022

Hive ransomware gang claim a cyber attack against Louisiana medical complex

On Friday 21st of October 2022, the largest medical complex in Lake Charles, Louisiana, The Lake Charles Memorial Health System experienced a cyber attack that involved the threat actors gaining unauthorized access to their network and stealing sensitive files. The files contained patient information such as: Full names Physical addresses Dates of birth Medical records Patient identification numbers Health insurance […]
December 19, 2022

H-Hotels cyber attack claimed by Play ransomware

On Sunday 11th of December 2022, a German hotel chain, H-Hotels experienced a cyber attack that resulted in their IT systems being immediately shut down and disconnected from the Internet in order to stop further spread. Although the attack did not impact guests’ bookings, hotel staff were not able to receive or answer customer requests sent via email. “According to […]
December 16, 2022

BlackCat ransomware gang believed to be responsible for a cyber attack against Colombian energy supplier EPM

On Monday 12th of December 2022, the Colombian energy company Empresas Públicas de Medellín (EPM) experienced a ransomware attack that disrupted the company’s operations and took down online services. On Tuesday 13th of December 2022, the company told approximately 4,000 employees to work from home, with IT infrastructure down. Even though EPM did not disclose the ransomware operation behind the […]
December 12, 2022

Cyber attack against Belgium city of Antwerp claimed by Play ransomware

On Thursday 5th of December 2022, Digipolis, the IT company responsible for managing the Belgium city of Antwerp’s IT systems, suffered a ransomware attack that disrupted the city’s IT, email, and phone services. It was reported that many of the city’s Windows applications were no longer available, and City council member Alexandra d’Archambeau publicly tweeted that email was not available. It also […]
December 6, 2022

Cause of Rackspace outage confirmed to be ransomware attack

On Friday 6th of December 2022, the Texas-based cloud computing provider, Rackspace confirmed that a ransomware attack is a cause behind their ongoing Hosted Exchange outage that started on Friday 2nd of December 2022. In their update to the initial report, Rackspace stated they had become aware of suspicious activity and immediately took proactive measures to isolate the Hosted Exchange […]
December 5, 2022

André-Mignot teaching hospital heavily disrupted after ransomware attack

On Saturday 3rd December, the André-Mignot teaching hospital in the suburbs of Paris had to shut down its phone and computer systems after suffering a ransomware attack. It has been reported that the threat actors behind the attack have already demanded a ransom. At this time, the hospital only accepts walk-ins and consultations as it had to partially cancel operations. […]