Portugal’s largest media conglomerate, Impresa attacked by Lapsus$ ransomware gang

Over the New Year Holiday, Impresa, the largest media conglomerate in Portugal and the owner of SIC and Expresso, the country’s largest TV channel and weekly newspaper was hit ransomware which targeted their online IT server infrastructure. This incident resulted in the 2ebsites for the Impressa group, Expresso, and all the SIC TV channels being taken offline as well as SIC’s internet streaming capabilities. Although the attack didn’t not impact the national airwave and cable TV broadcasts.

The ransomware group responsible for the attack are the Lapsus$ group who took credit for the incident by defacing all Impressa’s sites with a ransom note. The Lapsus$ group also has claimed that they have gained access to Impresa’s Amazon Web Services account. But it is believed that Impresa has regained control over the Amazon Web Service account.