conti attacks KP Snacks

Incident Date:

February 7, 2022

World map

Overview

Title

conti attacks KP Snacks

Victim

KP Snacks

Attacker

Conti

Location

Macklin, United Kingdom

Billingham, United Kingdom

First Reported

February 7, 2022

KP Snacks Hit by Conti Ransomware Attack

KP Snacks, a British food producer with over 2,000 employees and annual revenue exceeding $630 million, has been hit by the Conti ransomware group. The attack, which occurred on January 28, 2022, led to a disruption in the company's IT systems and supply chain, causing delays and cancellations of orders until at least the end of March.

KP Snacks is known for its popular brands such as Skips, Nik Naks, Hula Hoops, McCoy's crisps, Tyrrells, Space Raiders, Butterkist, Pom-Bears, and KP Nuts. The company's products are a staple in British grocery stores, and their absence from shelves has caused concern among retailers.

The Conti ransomware group, which is linked to the Wizard Spider Russian cybercrime group, has been responsible for numerous high-profile attacks, including those on Bank Indonesia, the Nordic Choice hotel group, and the Irish Health Service Executive. The group is known for exploiting the Log4j vulnerabilities and has made over $150 million in the last six months.

The attack on KP Snacks highlights the potential disruption that ransomware attacks can cause to supply chains and the importance of robust cybersecurity measures. Despite the challenges, KP Snacks has promised to keep its products stocked and on shelves while keeping its colleagues, customers, and suppliers informed of any future developments.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.