Ransomware 4. juni 2021

Kompan hit by ransomware (Conti)

Virksomhed

Kompan A/S

Aktør

Conti

## Beskrivelse

The danish company Kompan A/S that sells equipment for playgrounds (turnover of 877 million DKK in 2020) was hit by ransomware in beginning of July 2021 but the attack was first discovered in the morning of the 19th of July 2021. When the attack was discovered Kompan shut down all servers within 30 minuttes, but by then 562GB of data mainly personal information on employees, financial information, partner information and internal confidential data was already exfiltrated. CSIS advised them that all exfiltrated data seemed to be deleted but the data (internal data, employee copies of passports, health information etc.) was later found on the dark web. According to the danish newssite Version2, the leak contained information about at least one former employee that had been with the company 9 years prior and should therefor not have existed in the leak due to GDPR.

## Sikkerhedsrådgivning

CSIS

## Detektionsregler (Yara/Sigma)

None

## Referencer

← Alle hændelser Se kilde på GitHub