Ransomware Attack Disrupts ICN Systems in Itaguaí
Summary
ICN says ransomware encrypted data and disrupted its IT environment, including email, systems, files and databases. The company shut down the environment and is investigating and restoring backups; possible data theft remains unconfirmed.
Key points
- ICN identified a ransomware attack around 11 p.m. on Sunday the 9th, according to an internal company communication obtained by Jornal Atual.
- The attack encrypted data in ICN’s IT environment. The company shut it down to contain the malware.
- Email, systems, files and databases were affected; employees reportedly remained without access to email, the network, systems and internet.
- ICN IT teams and specialist firms were investigating the cause, scanning the environment, rebuilding servers and restoring backups.
- As of Friday the 14th, the company had given no timeline for full restoration, and its public website was offline.
- ICN had not confirmed whether attackers accessed or copied data, including information related to Brazil’s submarine development program.
Article Details
- Victim Organization
- Itaguaí Construções Navais (ICN)
- Incident Type
- Ransomware attack
- Operational Impact
- Data in ICN's IT environment was encrypted. The company shut down the environment to contain the attack. Email servers, systems, files, and databases were affected; the company reported no access to email, network, systems, or internet at the time of its internal communication. Its website was also offline when the article was published.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed