Kevin Beaumont
Two years ago, Coop in Sweden had a major ransomware incident where all their point of sale devices got wiped.
Now, they’ve been hit by a ransomware group again - this time Cactus. Unclear if point of sale devices wiped this time, probably not would be my guess. #threatintel
Kevin Beaumont
257gb of Coop Sweden’s data has been dumped by Cactus ransomware group #threatintel
Kevin Beaumont
Here’s a retrospective from their IR provider on the prior incident https://www.truesec.com/cases/back-in-business-after-the-largest-ransomware-attack-of-all-time #threatintel
Kevin Beaumont
This was the previous time: https://www.nytimes.com/2021/07/02/technology/cyberattack-businesses-ransom.html
Kevin Beaumont
Swedish radio report hundreds of thousands of members' data for Coop in Sweden is on Cactus ransomware group's portal. #threatintel https://sverigesradio.se/artikel/coop-varmland-bekraftar-medlemslacka-ror-over-hundratusen-medlemmar
Christoffer S.
@GossiTheDog
One important addition. Coop is a cooperative, and thia incident affects one such part of the larger Coop.
Roughly 140,000 members are affected which quite obviously is not a small amount, yet not the full amount of all Coop customers and members.
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.