Year2022 |
MonthAugust |
Reference number20220802 |
Impact areaShore |
Incident locationValcourt |
Incident countryCanada |
Victim countryCanada |
Victim identityBombardier Recreational Products Inc |
Victim TypeShip Builder |
MethodRansomware |
In August 2022 Bombardier Recreational Products Inc.(BRP) experienced a ransomware attack which crippled their operation for multiple days. Initially BRP reported that it was the target of malicious cybersecurity activity and that BRP took immediate measures to contain the situation. BRP later announced that they had become aware that, “information on certain employees and suppliers accessed by an unauthorized third party has been leaked on the dark web.” Ransomware gang RansomEXX promptly took credit for the “malicious cyberactivity”, stealing 29.9GB of files pertaining to non-disclosure agreements, passports, IDs, contracts, and supply agreements.