Semikron, a German manufacturer of power electronics, has acknowledged that its network was partially encrypted due to a ransomware attack. With projected revenue of $461 million in 2020, Semikron employs approximately 3,000 people across 24 offices and 8 production facilities located in Germany, Brazil, China, France, India, Italy, Slovakia, and the United States. Moreover, it claims to be one of the top producers of power engineering components, with its innovations powering 35% of the annual installed base of wind turbines.
“The SEMIKRON Group has been the victim of a cyber attack by a professional hacker group. As part of this attack, the perpetrators have claimed to have stolen data from our system,” revealed the company in a recently-released statement. “The attack has also led to partial encryption of our IT systems and files. The entire network is currently being studied and adjusted forensic.”
The German Federal Office for Information Security (aka Bundesamt für Sicherheit in der Informationstechnik) has issued a warning that the ransomware developers are extorting the business and threatening to reveal purportedly stolen data. Though the company withheld any details on the ransomware employed in the event, a ransom note on one of the encrypted Semikron systems reveals it was an LV Ransomware assault and claims the perpetrators took 2TB worth of data.
Semikron is investigating attackers’ allegations that they took data from the encrypted systems before encryption with the aid of outside cybersecurity and forensic specialists. The business further stated that it alerted customers and partners if any proof of data theft was discovered and worked in conjunction with pertinent authorities throughout the inquiry.
Semikron further stated that they are simultaneously working on reinstating operational capability to decrease inconveniences for their staff, clients, and business partners and guarantee the highest level of IT system security. The appropriate authorities are also assisting them in investigating and coordinating additional actions.
When Semikron was contacted regarding this attack, a spokesperson was not available for comments.