Exploit: Ransomware, Phishing
Company: Craftsman Collision
Industry: Service, Automobile Repair
Source: https://bc.ctvnews.ca/hackers-target-craftsman-collision-with-ransomware-attack-1.4729962

Hackers successfully deployed a ransomware attack infiltrating Craftsman Collision, one of BC’s largest auto repair companies. The hackers were able to secure the company’s domain name and send out phishing emails to their customers. Thankfully Craftsman Collision had recently updated their servers and were able to immediately shut them down before the attack was able to progress. With such quick action the company has said that no customer data was compromised in the breach. Details and customer notification are expected in 2-3 weeks following a 3rd party investigation of the incident.

Although Craftsman Collision was able to instantly respond with updated servers and security measures, the company has admitted that the financial toll was still great as it had to shut down operations for weeks until the investigation concludes. Losses are expected to mount in the range of hundreds of thousands of dollars in the form of downtime costs and paying for the investigation.

The silver lining is a thin one in this scenario. On one hand, response planning and quick action was able to thwart a bigger blow to the company. However, damage to the company’s reputation and downtime/remediation costs were unavoidable proving that no matter how quickly a company can react, prevention is still the greatest protection organizations of any size have against cyber attacks. Investments in employee awareness and training can go a long way in prevention. Doubling down with multiple security layers including Whitelisting and various other endpoint protection methods, provides more assurance that attacks can be identified beforehand. In Craftsman Collision’s case, there are no details of what their security entailed but we do know that the company will have to monitor the Dark Web and other sources to see if any data has been compromised in what seems to be a costly downtime.

Protect Your Business Against Modern Cyber Threats

More than ever, organizations of all sizes have been facing a historical rise in cyber attacks and data breaches. Talk to a cyber security expert today and find out how we can provide expert consulting and a portfolio of Cyber Security solutions designed to protect your organization against today’s most prevalent threats.