In March 2023, SecureWidgets Inc., a leading software development company, faced a ransomware attack that encrypted critical development data and demanded a significant payment in cryptocurrency for the decryption keys. The attack leveraged a previously unknown vulnerability in the company's email system, which allowed the attackers to infiltrate the network. The incident resulted in disruption of development operations for two weeks and caused delays in product releases. Although no customer or employee data was stolen, the company faced reputational damage and financial losses due to the interruption of services and the cost of incident response. SecureWidgets Inc. opted not to pay the ransom and instead worked to restore systems from backups, although some recent data could not be fully recovered.
Source: https://iclg.com/practice-areas/cybersecurity-laws-and-regulations/germany
"id": "sec429051424",
"linkid": "securewidgets-inc",
"type": "Ransomware",
"date": "03/2023",
"severity": "85",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"