Canadian ship builder Bombardier Recreational Products Inc.(BRP) experienced a ransomware attack

Year

2022

Month

August

Reference number

20220802

Impact area

Shore

Incident location

Valcourt

Incident country

Canada

Victim country

Canada

Victim identity

Bombardier Recreational Products Inc

Victim Type

Ship Builder

Method

Ransomware

Summary:

In August 2022 Bombardier Recreational Products Inc.(BRP) experienced a ransomware attack which crippled their operation for multiple days. Initially BRP reported that it was the target of malicious cybersecurity activity and that BRP took immediate measures to contain the situation. BRP later announced that they had become aware that, “information on certain employees and suppliers accessed by an unauthorized third party has been leaked on the dark web.” Ransomware gang RansomEXX promptly took credit for the “malicious cyberactivity”, stealing 29.9GB of files pertaining to non-disclosure agreements, passports, IDs, contracts, and supply agreements.

Reference URL

https://sxsguys.com/news/supply-chain/brp-hit-by-crippling-malware/
https://ir.brp.com/news-releases/news-release-details/brp-reports-cyberattack https://ics-cert.kaspersky.com/publications/reports/2023/03/15/h2-2022-brief-overview-of-main-incidents-in-industrial-cybersecurity/