ThyssenKrupp Discloses Cybersecurity Incident Impacting Automotive Division
ThyssenKrupp, a German steel giant, disclosed a cybersecurity incident that affected its Automotive division last week. The company promptly responded by shutting down its IT systems to contain the threat. Evelin Veit, the company spokeswoman, confirmed the incident involved the Thyssenkrupp Automotive Body Solutions business unit and was detected early by the division's IT security team. She further stated that the situation was currently under control, and the company was working towards a gradual return to normal operations.
ThyssenKrupp did not disclose the specifics of the attack, although the decision to shut down its IT systems suggests the presence of a ransomware attack. This is not the first time ThyssenKrupp has suffered a cyber attack. The company has previously been targeted in 2012, 2016, 2020, and 2022, suffering a series of attacks that range from espionage to ransomware. It is not clear if this incident is connected to those previous attacks.
In 2012, the company suffered a severe cyber attack that was classified as "heavy" and of "exceptional quality." In 2016, alleged Asian threat actors targeted ThyssenKrupp to steal company secrets, suspected to be related to the region's technological know-how and research activities. In 2020, ThyssenKrupp Materials and ThyssenKrupp System Engineering were hit by ransomware attacks, exposing the company's HR information and confidential data, including SSNs and bank account information of employees. Finally, in 2022, ThyssenKrupp's Materials Services division and corporate headquarters were also hit by a cyberattack.
The recent incident emphasizes the importance of robust cybersecurity measures and proactive response strategies. Companies like ThyssenKrupp are attractive targets for adversaries due to their strategic importance and vast amounts of sensitive data. Following this disclosure, ThyssenKrupp will need to ensure that data privacy and cybersecurity are at the forefront to prevent future attacks.