Dutch Scientific Research Organization (NWO)

The Dutch Scientific Research Organization (NWO) suffered a ransomware attack in February 2021, causing €4.5 million in damages. The attack, carried out by the DoppelPaymer group, disrupted the agency's grant application and review process, cutting off communication with applicants, grantees, and universities. The organization was unable to use email, apps, or phones and was forced to cancel meetings and unable to receive or pay bills until at least March 15.

Source: https://www.techradar.com/pro/security/suspect-arrested-with-links-to-eur4-5m-doppelpaymer-ransomware-attacks

TPRM report: https://www.rankiteo.com/company/nwo

"id": "nwo918051325",
"linkid": "nwo",
"type": "Ransomware",
"date": "2/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': ['Applicants',
                                               'Grantees',
                                               'Universities'],
                        'industry': 'Scientific Research',
                        'location': 'Netherlands',
                        'name': 'Dutch Scientific Research Organization (NWO)',
                        'type': 'Research Organization'}],
 'date_detected': 'February 2021',
 'description': 'The Dutch Scientific Research Organization (NWO) suffered a '
                'ransomware attack in February 2021, causing €4.5 million in '
                'damages.',
 'impact': {'downtime': 'Until at least March 15, 2021',
            'financial_loss': '€4.5 million',
            'operational_impact': ['Disruption of grant application and review '
                                   'process',
                                   'Cancellation of meetings',
                                   'Unable to receive or pay bills'],
            'systems_affected': ['Email', 'Apps', 'Phones']},
 'motivation': 'Financial Gain',
 'ransomware': {'ransomware_strain': 'DoppelPaymer'},
 'threat_actor': 'DoppelPaymer group',
 'title': 'Ransomware Attack on Dutch Scientific Research Organization (NWO)',
 'type': 'Ransomware Attack'}