blackbasta attacks English Construction Company
Incident Date:
June 8, 2022
Overview
Title
blackbasta attacks English Construction Company
Victim
English Construction Company
Attacker
Blackbasta
Location
First Reported
June 8, 2022
English Construction Company Ransomware Attack
The English Construction Company, a residential and commercial paving contractor serving Dayton and the surrounding areas, has recently fallen victim to a ransomware attack orchestrated by the BlackBasta group. This company, which prides itself on delivering high-quality paving services and products, now faces the challenge of dealing with the aftermath of this cyber assault.
Despite the lack of explicit details regarding the size of the English Construction Company, it is inferred that it is a medium-sized enterprise, given its operation across 50+ remote office locations and the presence of on-premises file servers in at least 40 of these locations. This setup indicates a considerable volume of data at risk, highlighting the significance of the attack.
The construction sector, as evidenced by recent trends, has become a prime target for ransomware attacks. The IT and construction industries combined have accounted for nearly half of all ransomware incidents in 2023. This vulnerability is attributed to the extensive attack surfaces and the high-value operations within these sectors.
As of now, the English Construction Company has not issued any public statements regarding the ransomware attack or disclosed any steps taken towards recovery. The decision on whether the ransom demand has been met remains undisclosed, leaving the company's recovery status uncertain.
Sources
- English Construction Company. About Us.
- The Record. British company fined £4.4 million over ransomware attack.
- Infosecurity Magazine. Research Shows IT and Construction Sectors Hardest Hit By Ransomware.
- Druva. Billion Dollar Construction Firm Fully Recovers from Ransomware Attack.
- The Horton Group. Ransomware Attacks in Construction.
- Darktrace. Darktrace Stops Ransomware Attack at UK Construction Company.
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.