Ransomware Attack Disrupts Orient Blackswan Systems; Attackers Demand Rs 20 Million

Summary
Orient Blackswan reported that a ransomware attack encrypted critical data and disrupted business operations. The company isolated affected systems, began restoring backups, and filed a police complaint; an investigation is underway.
Key points
- The company said its systems were compromised around 11:55 p.m. on August 27, and critical business data was encrypted.
- A ransom note demanded Rs 20 million and directed the company to contact two email addresses.
- The attack disrupted business operations, including servers and databases.
- The technical team isolated affected systems, started backup restoration, and alerted internal stakeholders.
- The company provided police with ransom-note screenshots, logs, forensic evidence, and details of affected systems.
- Hyderabad Cybercrime police registered a case and are investigating the attack.
Article Details
- Victim Organization
- Orient Blackswan
- Incident Type
- Ransomware attack
- Incident Date
- 2026-08-27
- Disclosure Date
- 2026-08-31
- Operational Impact
- Critical business data was encrypted and access to it was disrupted. Essential business operations, including servers and databases, were affected. The company isolated affected systems and initiated backup restoration.
- Ransom Or Extortion
- Attackers demanded Rs 20 million to restore access. The ransom note directed the company to contact two email addresses; the addresses were not included in the article.
- Claim Status
- confirmed
