BRP

Bombardier Recreational Products (BRP), a Canadian company suffered a cyber attack by the RansomEXX ransomware gang on August 8, 2022.

BRP temporarily stopped all operations as a response to "malicious cyberactivity" which impacted production and caused delays in certain transactions with customers and suppliers.

The RansomEXX gang listed Bombardier Recreational Products on its leak site along with 29.9GB of files allegedly stolen from the firm including non-disclosure agreements, passports and IDs, material supply agreements, contract renewals, and more.

Source: https://www.bleepingcomputer.com/news/security/ransomexx-claims-ransomware-attack-on-sea-doo-ski-doo-maker/

TPRM report: https://www.rankiteo.com/company/brp

"id": "brp212526822",
"linkid": "brp",
"type": "Ransomware",
"date": "8/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Recreational Products',
                        'location': 'Canada',
                        'name': 'Bombardier Recreational Products (BRP)',
                        'type': 'Corporation'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': ['passports and IDs'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['non-disclosure agreements',
                                              'passports and IDs',
                                              'material supply agreements',
                                              'contract renewals']},
 'date_detected': '2022-08-08',
 'description': 'Bombardier Recreational Products (BRP), a Canadian company, '
                'suffered a cyber attack by the RansomEXX ransomware gang on '
                'August 8, 2022. BRP temporarily stopped all operations as a '
                'response to "malicious cyberactivity" which impacted '
                'production and caused delays in certain transactions with '
                'customers and suppliers. The RansomEXX gang listed Bombardier '
                'Recreational Products on its leak site along with 29.9GB of '
                'files allegedly stolen from the firm including non-disclosure '
                'agreements, passports and IDs, material supply agreements, '
                'contract renewals, and more.',
 'impact': {'data_compromised': ['non-disclosure agreements',
                                 'passports and IDs',
                                 'material supply agreements',
                                 'contract renewals'],
            'downtime': ['production impacted',
                         'delays in transactions with customers and suppliers'],
            'operational_impact': 'Temporarily stopped all operations'},
 'motivation': 'Financial',
 'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'RansomEXX'},
 'threat_actor': 'RansomEXX ransomware gang',
 'title': 'Bombardier Recreational Products (BRP) Ransomware Attack',
 'type': 'Ransomware'}