Unidentified threat actors compromised the network of Moscow-based delivery service PickPoint, unlocking package lockers across terminals throughout the Russian capital.
The attack, described by the delivery company as the world’s first targeted cyberattack against a post-gateway network, when a failure in the checkpoint network’s operation led to the disabling of nearly 3,000 pickup terminals.
The attack was detected early, and orders were not affected.
Users whose purchases were in the affected checkpoints at the time of the cyber attack were notified about possible delays in receiving orders.
No reports of package theft have surfaced.
TPRM report: https://scoringcyber.rankiteo.com/company/pickpoint
"id": "pic235121122",
"linkid": "pickpoint",
"type": "Cyber Attack",
"date": "12/2020",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': 'Users with purchases in '
'affected checkpoints',
'industry': 'Logistics',
'location': 'Moscow, Russia',
'name': 'PickPoint',
'type': 'Delivery Service'}],
'attack_vector': 'Network Compromise',
'description': 'Unidentified threat actors compromised the network of '
'Moscow-based delivery service PickPoint, unlocking package '
'lockers across terminals throughout the Russian capital.',
'impact': {'operational_impact': 'Disabling of nearly 3,000 pickup terminals',
'systems_affected': '3,000 pickup terminals'},
'response': {'communication_strategy': 'Users were notified about possible '
'delays in receiving orders'},
'threat_actor': 'Unidentified',
'title': 'Cyber Attack on PickPoint Delivery Service',
'type': 'Cyber Attack'}