alphv attacks Matco Electric

Incident Date:

June 22, 2022

World map

Overview

Title

alphv attacks Matco Electric

Victim

Matco Electric

Attacker

Alphv

Location

Vestal, USA

New York, USA

First Reported

June 22, 2022

Matco Electric Corporation: A Full-Service Electrical Technologies Firm Targeted by Ransomware Group Alphv

Matco Electric Corporation, a full-service electrical technologies firm with over 50 years of experience, has been targeted by the ransomware group Alphv. The company operates in the construction sector and is known for its dedication to service after the project is complete, offering 24/7 emergency services.

Matco Electric Corporation is a subsidiary of the Vontier Corporation, a global industrial technology company that is publicly traded on the NYSE under the ticker symbol “VNT”. The company employs over 637 people and generates approximately $139 million in annual revenue.

The ransomware attack on Matco Electric Corporation is part of a broader trend of cyber threats targeting critical infrastructure companies. In 2023, data from SecurityScorecard found that 90% of the world's biggest energy companies had suffered a supply chain data breach in the past 12 months.

The Alphv ransomware group has been increasingly active in recent months, using well-known tooling and methods to gain access to victim networks. The group has been linked to a number of high-profile attacks, including one on Schneider Electric, a major energy firm.

The attack on Matco Electric Corporation highlights the need for companies in the construction sector to prioritize cybersecurity measures to protect against ransomware attacks. Despite the challenges posed by the evolving threat landscape, companies can take steps to mitigate the risks, such as implementing robust security protocols, conducting regular vulnerability assessments, and investing in cybersecurity training for employees.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.