BlackBasta attacks Sobeys

Incident Date:

November 11, 2022

World map

Overview

Title

BlackBasta attacks Sobeys

Victim

Sobeys

Attacker

Blackbasta

Location

Toronto, Canada

, Canada

First Reported

November 11, 2022

The BlackBasta Ransomware Gang Attacks Sobeys

Canadian food retail giant Sobeys has been grappling with IT systems issues that have impacted its grocery stores and pharmacies since November 5th. Sobeys, one of the country's two national grocery retailers, operates a vast network of 1,500 stores across all ten provinces. With multiple retail banners such as Sobeys, Safeway, IGA, Foodland, FreshCo, Thrifty Foods, and Lawtons Drugs, the Company employs approximately 134,000 individuals.

In a press release issued on Monday by Empire, Sobeys' parent company, it was disclosed that while the grocery stores remained open, certain services were affected due to an overarching IT problem. "The Company's grocery stores remain open to serve customers and are not experiencing significant disruptions at this time. However, some in-store services are functioning intermittently or with a delay," stated the retailer.

Furthermore, the press release revealed, "In addition, certain of the Company's pharmacies are experiencing technical difficulties in fulfilling prescriptions. The Company, however, remains committed to the continuity of care of all its pharmacy patients." The Company emphasized its dedication to resolving the IT system issues promptly in order to minimize disruptions to store operations.

In a separate statement posted on Sobeys' official website, the retailer assured customers that all stores were open and operating without significant disruptions, despite the ongoing IT challenges. However, reports from employees indicated that computers in affected Sobeys stores were inaccessible, although point-of-sale (POS) and payment processing systems continued to function since they operate on a separate network.

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.