Lacroix Group Hit by Ransomware Attack

Lacroix Group, a technological equipment manufacturer, has closed three production sites for a week in the wake of a ransomware attack.

The company is an international designer and manufacturer of embedded and industrial internet of things (IIoT) systems. It has reported that on the night of May 12th, 2023, it detected a cyber attack targeting its French (Beaupréau), German (Willich), and Tunisian (Zriba) sites.

Once Lacroix shut down computer systems at affected sites, it launched an investigation to determine whether the attack was fully contained or any data was exfiltrated. Threat actors had managed to deploy file-encrypting ransomware, encrypting some of the local infrastructures, before Lacroix managed to intercept the attack.

“The time needed to carry out these actions and to use the backups to restart should take a few days, which is why the three sites are closed for the week,” Lacroix says.