BlackBasta attacks Sobeys
Date:
November 11, 2022
Overview
Title
BlackBasta attacks Sobeys
Victim
Sobeys
Attacker
BlackBasta
Location
Size of Attack
Unknown/TBD
First Reported
November 11, 2022
Last Updated
October 31, 2022
The BlackBasta ransomware gang has attacked Sobeys. Canadian food retail giant Sobeys has been grappling with IT systems issues that have impacted its grocery stores and pharmacies since November 5th. Sobeys, one of the country's two national grocery retailers, operates a vast network of 1,500 stores across all ten provinces. With multiple retail banners such as Sobeys, Safeway, IGA, Foodland, FreshCo, Thrifty Foods, and Lawtons Drugs, the Company employs approximately 134,000 individuals. In a press release issued on Monday by Empire, Sobeys' parent company, it was disclosed that while the grocery stores remained open, certain services were affected due to an overarching IT problem. "The Company's grocery stores remain open to serve customers and are not experiencing significant disruptions at this time. However, some in-store services are functioning intermittently or with a delay," stated the retailer. Furthermore, the press release revealed, "In addition, certain of the Company's pharmacies are experiencing technical difficulties in fulfilling prescriptions. The Company, however, remains committed to the continuity of care of all its pharmacy patients." The Company emphasized its dedication to resolving the IT system issues promptly in order to minimize disruptions to store operations. In a separate statement posted on Sobeys' official website, the retailer assured customers that all stores were open and operating without significant disruptions, despite the ongoing IT challenges. However, reports from employees indicated that computers in affected Sobeys stores were inaccessible, although point-of-sale (POS) and payment processing systems continued to function since they operate on a separate network.
This attack's description was not found, while we work on the detailed account of this attack we invite you to browse through other recent Rasomware Attacks in the table below.
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.