Delta: Russian security systems firm Delta hit by cyberattack, services disrupted

Delta Security Systems Hit by State-Linked Cyberattack, Causing Widespread Disruptions

A large-scale cyberattack has severely disrupted operations at Delta, a Russian provider of alarm and security systems for homes, businesses, and vehicles. The company confirmed on Monday that it was targeted by a "well-organized" attack allegedly originating from a "hostile foreign state", leading to service outages and customer complaints across Russia.

Delta’s marketing director, Valery Ushkov, stated in a video address that the company’s infrastructure was overwhelmed by the attack, delaying recovery efforts as teams worked to restore backups while fending off potential follow-up strikes. As of Tuesday, Delta’s website and phone lines remained offline, forcing the company to communicate with customers via its VKontakte social media page.

The attack had real-world consequences for users. Reports from Baza and Kommersant detailed widespread malfunctions, including:

• Car alarms failing to deactivate, leaving vehicles locked or engines shutting down mid-drive.
• Remote start systems and door locks malfunctioning unexpectedly.
• Home and commercial alarm systems entering emergency mode and becoming unresponsive.

While Delta denied any customer data compromise, an unverified Telegram channel claiming to represent the attackers posted an alleged stolen data archive. The authenticity of the material remains unconfirmed.

The incident coincided with a separate IT outage affecting Russian airlines and airports, disrupting booking, check-in, and refund systems. Authorities attributed this failure to an internal technical issue at Sirena-Travel, a key aviation IT provider, rather than a cyberattack though the company has faced previous breaches, including a 2023 hack of its flight reservation system.

Source: https://therecord.media/russia-delta-security-alarm-company-cyberattack

Delta Security cybersecurity rating report: https://www.rankiteo.com/company/delta-security

"id": "DEL1769525964",
"linkid": "delta-security",
"type": "Cyber Attack",
"date": "6/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Widespread (homes, businesses, '
                                              'vehicles)',
                        'industry': 'Security Systems',
                        'location': 'Russia',
                        'name': 'Delta',
                        'type': 'Company'}],
 'customer_advisories': 'Communicated via VKontakte',
 'data_breach': {'data_exfiltration': 'Unverified claims of stolen data '
                                      'archive'},
 'date_publicly_disclosed': '2023-10-02',
 'description': 'A large-scale cyberattack has severely disrupted operations '
                'at Delta, a Russian provider of alarm and security systems '
                'for homes, businesses, and vehicles. The attack allegedly '
                'originated from a hostile foreign state, leading to service '
                "outages and customer complaints across Russia. Delta's "
                'infrastructure was overwhelmed, causing malfunctions in car '
                'alarms, remote start systems, door locks, and home/commercial '
                'alarm systems.',
 'impact': {'brand_reputation_impact': 'Significant',
            'customer_complaints': 'Yes',
            'data_compromised': 'Denied by Delta, but unverified claims of '
                                'stolen data exist',
            'downtime': 'Ongoing as of 2023-10-03',
            'operational_impact': 'Widespread service disruptions, '
                                  'unresponsive systems, customer complaints',
            'systems_affected': 'Alarm systems, car alarms, remote start '
                                'systems, door locks, website, phone lines'},
 'investigation_status': 'Ongoing',
 'motivation': 'Disruption',
 'references': [{'source': 'Baza'},
                {'source': 'Kommersant'},
                {'source': 'Delta (VKontakte)'},
                {'source': 'Unverified Telegram channel'}],
 'response': {'communication_strategy': 'Via VKontakte social media page',
              'containment_measures': 'Restoring backups, fending off '
                                      'follow-up strikes',
              'incident_response_plan_activated': 'Yes',
              'recovery_measures': 'Restoring systems from backups',
              'remediation_measures': 'Ongoing recovery efforts'},
 'threat_actor': 'State-linked',
 'title': 'Delta Security Systems Hit by State-Linked Cyberattack',
 'type': 'Cyberattack'}