unknown attacks Lacroix Group

Incident Date:

May 15, 2023

World map



unknown attacks Lacroix Group






Bourrelier, France

, France

First Reported

May 15, 2023

Lacroix Group Hit by Ransomware Attack

Lacroix Group, a technological equipment manufacturer, has closed three production sites for a week in the wake of a ransomware attack.

The company is an international designer and manufacturer of embedded and industrial internet of things (IIoT) systems. It has reported that on the night of May 12th, 2023, it detected a cyber attack targeting its French (Beaupréau), German (Willich), and Tunisian (Zriba) sites.

Once Lacroix shut down computer systems at affected sites, it launched an investigation to determine whether the attack was fully contained or any data was exfiltrated. Threat actors had managed to deploy file-encrypting ransomware, encrypting some of the local infrastructures, before Lacroix managed to intercept the attack.

“The time needed to carry out these actions and to use the backups to restart should take a few days, which is why the three sites are closed for the week,” Lacroix says.

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.