GTT Group

In 2023, GTT Group, a Canada-based maritime technology company, suffered a ransomware attack executed by the BlackBasta group, a Russia-linked cybercriminal syndicate known for high-profile, sophisticated ransomware operations. The attack disrupted GTT’s technological services, crippling critical operations within the maritime sector—a domain heavily reliant on real-time data, navigation systems, and secure communications. While the exact extent of data compromise remains undisclosed, the incident underscored the severe operational risks posed by ransomware in industries where system downtime can have cascading effects on global supply chains, vessel safety, and logistical integrity.The attack not only halted core services but also exposed vulnerabilities in GTT’s cybersecurity posture, raising concerns about the potential exfiltration of proprietary maritime technology or customer data—though no public confirmation of data theft was made. The financial and reputational fallout included operational delays, recovery costs, and erosion of client trust, particularly among shipping firms and defense contractors reliant on GTT’s solutions. The incident aligns with BlackBasta’s modus operandi of double extortion (encrypting data and threatening leaks), though the article does not confirm whether a ransom was paid or if sensitive data was published.Given the maritime sector’s strategic importance, the attack also carries broader implications for critical infrastructure resilience, highlighting how ransomware can disrupt economically vital services beyond immediate corporate boundaries.

Source: https://www.bleepingcomputer.com/news/security/chilean-telecom-giant-gtd-hit-by-the-rorschach-ransomware-gang/

TPRM report: https://www.rankiteo.com/company/gtt-technology-for-a-sustainable-world

"id": "gtt421092125",
"linkid": "gtt-technology-for-a-sustainable-world",
"type": "Ransomware",
"date": "6/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'technology (maritime sector)',
                        'location': 'Canada',
                        'name': 'GTT Group',
                        'type': 'company'}],
 'description': 'In 2023, GTT Group, a Canada-based technology company, fell '
                'victim to a ransomware attack orchestrated by BlackBasta. The '
                'group, suspected to originate from Russia, is known for its '
                'high-profile ransomware incidents and sophisticated tactics. '
                'The attack on GTT Group disrupted technological services and '
                'highlighted the continuing threat that ransomware poses to '
                'the maritime technology sector.',
 'impact': {'operational_impact': 'disruption of technological services',
            'systems_affected': ['technological services']},
 'ransomware': {'ransomware_strain': 'BlackBasta'},
 'threat_actor': 'BlackBasta',
 'title': 'Ransomware Attack on GTT Group by BlackBasta',
 'type': 'ransomware'}