UL Solutions

UL LLC, better known as Underwriters Laboratories, suffered a ransomware attack after the attackers encrypted its servers and caused them to shut down systems.

The attack made it impossible for its employees to perform their jobs.

UL shut down the system and told employees not to contact the threat actors or visit any sites related to the ransomware operation.

UL also decided not to pay the ransom and started restoring from backups instead.

Source: https://www.bleepingcomputer.com/news/security/underwriters-laboratories-ul-certification-giant-hit-by-ransomware/

TPRM report: https://scoringcyber.rankiteo.com/company/ulsolutions

"id": "uls224071222",
"linkid": "ulsolutions",
"type": "Ransomware",
"date": "02/2021",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Standards and Certification',
                        'name': 'UL LLC',
                        'type': 'Company'}],
 'attack_vector': 'Server Encryption',
 'data_breach': {'data_encryption': 'Yes'},
 'description': 'Underwriters Laboratories (UL LLC) suffered a ransomware '
                'attack where its servers were encrypted, causing a system '
                'shutdown and making it impossible for employees to perform '
                'their jobs. UL decided not to pay the ransom and restored '
                'from backups.',
 'impact': {'downtime': 'Significant',
            'operational_impact': 'Employees unable to perform jobs',
            'systems_affected': ['Servers']},
 'motivation': 'Ransom',
 'ransomware': {'data_encryption': 'Yes', 'ransom_paid': 'No'},
 'response': {'containment_measures': ['System shutdown',
                                       'Instructed employees not to contact '
                                       'threat actors or visit related sites'],
              'remediation_measures': ['Restored from backups']},
 'title': 'Ransomware Attack on Underwriters Laboratories',
 'type': 'Ransomware'}