CARINTHIA

The ALPHV/BlackCat ransomware group attacked the Austrian state of Carinthia and demanded a payment of five million dollars in Bitcoin to unlock all the files it has managed to encrypt.

The cyberattack has affected 3,000 IT workstations, crippling the state's email service and taking its website offline, as well as affecting the COVID-19 contact tracking system in administrative offices.

It also left several public administrations temporarily paralysed.

However, the state police and the State Office for the Protection of the Constitution and against Terrorism are continuing their investigation.

Source: https://www.incibe-cert.es/en/early-warning/cybersecurity-highlights/austrian-state-carinthia-hit-blackcat-ransomware

TPRM report: https://www.rankiteo.com/company/carinthia

"id": "car2232181122",
"linkid": "carinthia",
"type": "Ransomware",
"date": "05/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"

{'affected_entities': [{'industry': 'Government',
                        'location': 'Austria',
                        'name': 'Carinthia',
                        'type': 'State'}],
 'description': 'The ALPHV/BlackCat ransomware group attacked the Austrian '
                'state of Carinthia and demanded a payment of five million '
                'dollars in Bitcoin to unlock all the files it has managed to '
                'encrypt. The cyberattack has affected 3,000 IT workstations, '
                "crippling the state's email service and taking its website "
                'offline, as well as affecting the COVID-19 contact tracking '
                'system in administrative offices. It also left several public '
                'administrations temporarily paralysed.',
 'impact': {'operational_impact': 'Several public administrations temporarily '
                                  'paralysed',
            'systems_affected': ['3,000 IT workstations',
                                 'email service',
                                 'website',
                                 'COVID-19 contact tracking system']},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial',
 'ransomware': {'data_encryption': 'Yes',
                'ransom_demanded': 'Five million dollars in Bitcoin',
                'ransomware_strain': 'ALPHV/BlackCat'},
 'response': {'law_enforcement_notified': 'Yes'},
 'threat_actor': 'ALPHV/BlackCat',
 'title': 'ALPHV/BlackCat Ransomware Attack on Carinthia',
 'type': 'Ransomware'}