Impresa

The webservers of Expresso newspaper and SIC TV station owned by Impresa were attacked by the Lapsus$ ransomware group in January 2022.

The attackers threaten to release the internal data if the media group failed to pay a ransom.

The websites of both Expresso and SIC TV were down and showed a page with the message of temporarily unavailable.

Source: https://www.reuters.com/business/media-telecom/portugals-impresa-media-outlets-hit-by-hackers-2022-01-03/

TPRM report: https://scoringcyber.rankiteo.com/company/impresa-publishing

"id": "imp155010222",
"linkid": "impresa-publishing",
"type": "Ransomware",
"date": "01/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Media',
                        'name': 'Impresa',
                        'type': 'Media Group'}],
 'data_breach': {'data_exfiltration': True,
                 'type_of_data_compromised': 'Internal data'},
 'date_detected': 'January 2022',
 'description': 'The webservers of Expresso newspaper and SIC TV station owned '
                'by Impresa were attacked by the Lapsus$ ransomware group in '
                'January 2022. The attackers threatened to release the '
                'internal data if the media group failed to pay a ransom. The '
                'websites of both Expresso and SIC TV were down and showed a '
                'page with the message of temporarily unavailable.',
 'impact': {'data_compromised': ['Internal data'],
            'downtime': 'Significant',
            'operational_impact': 'Websites down',
            'systems_affected': ['Webservers of Expresso newspaper',
                                 'Webservers of SIC TV station']},
 'motivation': 'Financial',
 'ransomware': {'data_exfiltration': True,
                'ransom_demanded': True,
                'ransomware_strain': 'Lapsus$'},
 'threat_actor': 'Lapsus$',
 'title': 'Lapsus$ Ransomware Attack on Impresa',
 'type': 'Ransomware'}