Fourlis Group

The Fourlis Group, known for operating IKEA in various countries, disclosed a ransomware attack before Black Friday 2024 resulting in an estimated loss of €20 million. The incident, publicized on December 3, 2024, caused significant disruptions in store replenishment and e-commerce, particularly affecting IKEA shops and operations from December 2024 to February 2025. Although other businesses such as Intersport and Foot Locker are part of the group, IKEA bore the brunt of the consequences. No ransom was paid, and no data theft or leaks were reported following the attack.

Source: https://www.bleepingcomputer.com/news/security/ransomware-attack-cost-ikea-operator-in-eastern-europe-23-million/

TPRM report: https://scoringcyber.rankiteo.com/company/fourlis-group-of-companies

"id": "fou424041125",
"linkid": "fourlis-group-of-companies",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Home Furnishings',
                        'location': 'Various Countries',
                        'name': 'IKEA',
                        'type': 'Retail'}],
 'data_breach': {'data_exfiltration': 'No data theft or leaks reported'},
 'date_detected': 'November 2024',
 'date_publicly_disclosed': '2024-12-03',
 'description': 'The Fourlis Group, known for operating IKEA in various '
                'countries, disclosed a ransomware attack before Black Friday '
                '2024 resulting in an estimated loss of €20 million. The '
                'incident, publicized on December 3, 2024, caused significant '
                'disruptions in store replenishment and e-commerce, '
                'particularly affecting IKEA shops and operations from '
                'December 2024 to February 2025. Although other businesses '
                'such as Intersport and Foot Locker are part of the group, '
                'IKEA bore the brunt of the consequences. No ransom was paid, '
                'and no data theft or leaks were reported following the '
                'attack.',
 'impact': {'downtime': 'December 2024 to February 2025',
            'financial_loss': '€20 million',
            'operational_impact': 'Significant disruptions in store '
                                  'replenishment and e-commerce'},
 'motivation': 'Financial Gain',
 'ransomware': {'ransom_paid': 'No ransom was paid'},
 'title': 'Ransomware Attack on The Fourlis Group Before Black Friday 2024',
 'type': 'Ransomware Attack'}