KNP

KNP, a 158-year-old transport company based in Northamptonshire, collapsed after a ransomware attack by the Akira group. The attack began with a weak password, leading to encrypted systems and a ransom demand of up to £5 million. Unable to pay, the company lost all its data, resulting in 700 job losses and the complete shutdown of operations. Despite having cyber insurance and compliant IT systems, KNP could not recover, marking a devastating end to its long-standing legacy.

Source: https://economictimes.indiatimes.com/news/new-updates/one-password-700-jobs-lost-how-a-ransomware-attack-crushed-a-158-year-old-uk-firm/articleshow/122840923.cms

TPRM report: https://www.rankiteo.com/company/knpsol

"id": "knp906080725",
"linkid": "knpsol",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Transportation',
                        'location': 'Northamptonshire, UK',
                        'name': 'KNP',
                        'size': '158-year-old company with 500 lorries',
                        'type': 'Transport Company'},
                       {'customers_affected': '6.5 million members',
                        'industry': 'Retail',
                        'location': 'UK',
                        'name': 'Co-op',
                        'type': 'Retail Giant'}],
 'attack_vector': 'Weak password',
 'data_breach': {'data_encryption': 'Yes'},
 'description': 'KNP, a 158-year-old transport company based in '
                'Northamptonshire, was brought down by a ransomware attack '
                'initiated through a weak password. The attack, attributed to '
                "the Akira ransomware group, encrypted the company's systems, "
                'leading to its collapse and leaving 700 people without jobs.',
 'impact': {'brand_reputation_impact': 'Legacy in ruins',
            'financial_loss': 'Estimated ransom demand of £5 million',
            'operational_impact': 'Company collapse, 700 jobs lost',
            'systems_affected': 'Full-scale digital siege, encrypted systems'},
 'initial_access_broker': {'entry_point': 'Weak password'},
 'motivation': 'Financial gain',
 'post_incident_analysis': {'root_causes': 'Weak password'},
 'ransomware': {'data_encryption': 'Yes',
                'ransom_demanded': '£5 million',
                'ransom_paid': 'No',
                'ransomware_strain': 'Akira'},
 'threat_actor': 'Akira ransomware group',
 'title': 'Ransomware Attack on KNP Transport Company',
 'type': 'Ransomware',
 'vulnerability_exploited': 'Weak password'}