Medusa Ransomware Hits Farnell Packaging, Threatens Data Exposure

Incident Date: Jun 12, 2024

Attack Overview
VICTIM
Farnell Packaging
INDUSTRY
Manufacturing
LOCATION
Canada
ATTACKER
Medusa
FIRST REPORTED
June 12, 2024

Medusa Ransomware Group Targets Farnell Packaging

Overview of Farnell Packaging

Farnell Packaging Limited, headquartered in Dartmouth, Nova Scotia, Canada, is a family-owned company specializing in the design, manufacturing, and distribution of flexible packaging solutions. Founded in 1961, the company has been serving North American markets for over 60 years. With an annual revenue of $60 million in 2023, Farnell employs a dedicated team focused on providing sustainable packaging solutions for various industries, including food and beverage, pharmaceuticals, and consumer goods.

Attack Details

The ransomware group Medusa has claimed responsibility for a cyberattack on Farnell Packaging. The attackers allege they have accessed 193.9 GB of the company's data and have threatened to publish it within 8–9 days. This breach highlights the vulnerabilities that even well-established companies face in the evolving cybersecurity landscape.

About Medusa Ransomware Group

Medusa is a ransomware group that emerged in late 2022, operating as a Ransomware-as-a-Service (RaaS) platform. The group has been involved in numerous high-profile attacks across various sectors, including education, healthcare, and government services. Medusa's ransomware is known for its ability to disable applications and services, making detection and mitigation challenging. The group often demands substantial ransoms, with recent demands ranging from hundreds of thousands to millions of dollars.

Potential Vulnerabilities

Farnell Packaging's reliance on advanced technology and innovative techniques in their manufacturing processes may have exposed them to cyber threats. The company's commitment to sustainability and the use of eco-friendly materials could also have made them an attractive target for threat actors looking to exploit vulnerabilities in their systems. The attack underscores the importance of robust cybersecurity measures, especially for companies in the manufacturing sector.

Penetration Methods

While specific details of how Medusa penetrated Farnell Packaging's systems are not disclosed, common methods include phishing attacks, exploiting software vulnerabilities, and leveraging weak security protocols. Medusa's ransomware is designed to kill numerous applications and services, disable shadow copies, and encrypt critical data, making recovery efforts difficult.

Sources:

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.