Anglo-Eastern

On May 18, 2020, Anglo-Eastern, a Kowloon, Hong Kong-based ship management company, fell victim to a **ransomware attack** that encrypted a portion of its workstations and servers. In response, the company proactively took down its servers to contain and quarantine the malicious virus, preventing further spread. While the recovery process took several days, Anglo-Eastern confirmed that **no data was permanently lost** despite the encryption. The incident disrupted operations temporarily but did not result in data theft, financial fraud, or reputational damage beyond the internal IT outage. The company managed to restore systems without yielding to ransom demands, mitigating long-term consequences. The attack primarily caused operational delays rather than irreversible harm to data integrity or external stakeholders.

Source: https://arxiv.org/pdf/2112.06545.pdf

TPRM report: https://www.rankiteo.com/company/anglo-eastern

"id": "ang300092125",
"linkid": "anglo-eastern",
"type": "Ransomware",
"date": "5/2020",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'ship management',
                        'location': 'Kowloon, Hong Kong',
                        'name': 'Anglo-Eastern',
                        'type': 'company'}],
 'data_breach': {'data_encryption': True},
 'date_detected': '2020-05-18',
 'description': 'On May 18, 2020, Kowloon, Hong-Kong based ship manager '
                'Anglo-Eastern was hit by a ransomware attack, resulting in a '
                "part of the company's workstations and servers being "
                'encrypted. The company responded by taking down its servers '
                'in order to quarantine the malicious virus. Although, '
                'according to the company, it took days to recover the '
                'encrypted data, no data was lost eventually.',
 'impact': {'data_compromised': 'none',
            'downtime': 'days',
            'operational_impact': 'servers taken down for quarantine',
            'systems_affected': ['workstations', 'servers']},
 'ransomware': {'data_encryption': True},
 'response': {'containment_measures': ['servers taken down to quarantine the '
                                       'virus'],
              'incident_response_plan_activated': True,
              'recovery_measures': ['recovery of encrypted data']},
 'title': 'Ransomware Attack on Anglo-Eastern',
 'type': 'ransomware'}