Lyon Terminal Targeted in Ransomware Attack by 8Base Group

Incident Date:

April 15, 2024

World map

Overview

Title

Lyon Terminal Targeted in Ransomware Attack by 8Base Group

Victim

Lyon Terminal France

Attacker

8base

Location

Lyon, France

, France

First Reported

April 15, 2024

Ransomware Attack on Lyon Terminal by 8Base Group

Victim Overview

Lyon Terminal, established on January 1, 1993, by the Compagnie Nationale du Rhône, is a pivotal multimodal transportation hub in the Lyon region of France. Specializing in the handling of various intermodal transport units, the company offers services ranging from the rental and sale of containers to their repair and conversion. As the first multimodal platform in the region, Lyon Terminal facilitates both river and rail transport, significantly contributing to the regional and national logistics chain.

Cyberattack Details

The 8Base ransomware group, known for its aggressive double-extortion tactics, has targeted Lyon Terminal, leading to potential exposure of a wide array of sensitive data. This includes personal employee data, financial documents, and confidential business agreements. The specifics of the ransom demand remain undisclosed, and the full extent of the data breach is currently under investigation.

Vulnerabilities and Targeting

The company's significant role in the transportation and logistics sector makes it a valuable target for cybercriminals looking to exploit sensitive business and personal information for ransom. The integration of various services and the handling of extensive confidential data potentially increase the vulnerability to sophisticated cyberattacks like those conducted by the 8Base group.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.