Ransomware Attack Disrupts Nepal Share Trading, Affecting 72 Brokerages
Summary
A ransomware attack on Data Hub disrupted trading systems serving 72 Nepalese brokerages. SEBON formed a five-member probe team; affected systems remain offline for forensic analysis, with an isolated 4:00 AM backup available for recovery.
Key points
- The article reports that Data Hub detected the ransomware intrusion around 5:30 AM Sunday, affecting 72 of Nepal’s 92 registered brokerages.
- Trading operations were halted, and TMS, CDSC and payment gateway systems were affected.
- The affected systems were disconnected from external networks and taken offline for forensic analysis and clean restoration.
- A 4:00 AM Sunday backup was reported as isolated and uncompromised, about 90 minutes before the intrusion was detected.
- SEBON formed a five-member inspection committee and directed NEPSE and relevant authorities to submit an investigation report by September 28.
- The investigation is to examine the breach’s cause and vector, system vulnerabilities, and preventative measures; restoration updates and final findings were still pending.
Article Details
- Victim Organization
- Data Hub Pvt. Ltd.
- Incident Type
- Ransomware intrusion disrupted the Data Hub server and affected trading infrastructure.
- Operational Impact
- Trading operations were halted after systems serving 72 of Nepal’s 92 registered brokerage firms were affected. TMS, CDSC and clearing systems, and integrated payment gateways were disrupted or isolated. Affected systems were taken offline for forensic analysis and clean restoration; an isolated backup from 4:00 AM Sunday was reported uncompromised.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed