German arms maker Rheinmetall confirms BlackBasta ransomware attack

German automotive and arms manufacturer Rheinmetall AG has confirmed that it suffered a BlackBasta ransomware attack that impacted its civilian business. The incident was revealed following the BlackBasta ransomware group naming Rheinmetall on its extortion site on Saturday 20th of May 2023. The group also released samples of the data the hackers claimed to have stolen from the German company. The published data samples include non-disclosure agreements, technical schematics, passport scans, and purchase orders.

Rheinmetall AG has stated that it had informed the relevant law enforcement authorities and filed a criminal complaint with the Cologne public prosecutor’s office.