As one of the readers informs us, the network and servers of the Media Markt and Saturn group have been attacked and some of them are to be encrypted. The good news is that stores are still open, you can buy and pay, but some of the services your employees use is not available. The bad news is, unfortunately, a risk that is always associated with ransomware attacks – that is, possible theft of company data. Time will tell whether the theft traces could be confirmed and whether the criminals had access to employee or customer data. For now, the IT department is fighting:
Atak after Media Markt
The second reader adds that the attack it touched all of Europe, and Media Markt has received a ransom note – it is supposed to be 240 million dollars. However, it seems to us that this amount is only the beginning of “negotiations”. The real ransom amounts are from several to tens of millions of dollars, and if Media Markt decides to pay the ransom to recover data that it does not have backed up, they will likely negotiate it down a lot.
Update 8/11/2021, 16:45
According to the information that the Reader sent us, it looks like the ransomware that hit Media Markt is Hive.
He wrote about Hive ESET. The group has been active since the middle of the year and has several dozen victims, including hospitals. He’s targeting Linux machines.
I was buying at Media Markt – what to do, how to live?
For now, don’t panic, but preventively change the password for any website for which you had the same password as your Media Markt or Saturn account.
This topic is developmental, we will inform about the next findings in the updates.
PS. How to protect yourself from ransomware attacks and how to prepare for them, and how to properly respond to ransomware attacks when it happens, we have 2.5 hours of training. It deals with technical and legal aspects. You can see it online here. Better before the attack than after;)
Also read:
–
