The Netherlands Organization for Scientific Research (NWO) fell prey to the DoppelPaymer ramsonware attack in March 2021.
The research activities along with other operations were disrupted as the system network went down.
The organisation didn't pay the ransom and rebuilt its systems within few weeks, while the group started leaking documents on to the dark web
Source: https://www.insidehighered.com/news/2021/03/12/dutch-research-funder-frozen-hack
TPRM report: https://scoringcyber.rankiteo.com/company/nwoscience
"id": "nwo15475322",
"linkid": "nwoscience",
"type": "Ransomware",
"date": "03/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Scientific Research',
'location': 'Netherlands',
'name': 'Netherlands Organization for Scientific '
'Research (NWO)',
'type': 'Research Organization'}],
'data_breach': {'data_exfiltration': True,
'type_of_data_compromised': ['Research data',
'Operational data']},
'date_detected': 'March 2021',
'description': 'The Netherlands Organization for Scientific Research (NWO) '
'fell prey to the DoppelPaymer ransomware attack in March '
'2021. The research activities along with other operations '
'were disrupted as the system network went down. The '
"organization didn't pay the ransom and rebuilt its systems "
'within a few weeks, while the group started leaking documents '
'onto the dark web.',
'impact': {'data_compromised': ['Research data', 'Operational data'],
'downtime': 'Few weeks',
'operational_impact': 'Disruption of research activities and other '
'operations',
'systems_affected': ['System network']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Financial',
'ransomware': {'data_encryption': True,
'data_exfiltration': True,
'ransomware_strain': 'DoppelPaymer'},
'response': {'remediation_measures': ['Rebuilding systems']},
'threat_actor': 'DoppelPaymer',
'title': 'DoppelPaymer Ransomware Attack on NWO',
'type': 'Ransomware'}