Share this article on:
One of the largest steel manufacturers in the world has shut down some of its IT systems after a cyber attack breached part of the organisation.
Steel giant ThyssenKrupp AP, one of the world’s largest suppliers of steel and has over 100,000 staff, announced that a cyber attack on its automotive division led to it disabling its IT systems to prevent further damage.
“Our ThyssenKrupp Automotive Body Solutions business unit recorded unauthorised access to its IT infrastructure last week,” a spokesperson told BleepingComputer.
“The IT security team at Automotive Body Solutions recognised the incident at an early stage and has since worked with the ThyssenKrupp Group’s IT security team to contain the threat.
“To this end, various security measures were taken and certain applications and systems were temporarily taken offline.”
According to German news publication Saarbruecker Zeitung, which originally reported on the incident last week, the Saarland-based ThyssenKrupp plant was directly impacted by the breach.
As confirmed by ThyssenKrupp, the plant’s operations were brought to a standstill. The facility employs over 1,000 specialists and is responsible for the production and processing of steel, alongside industry collaboration for research and development.
While ThyssenKrupp has stressed that no other parts of its business were affected by the cyber attack, the incident may have a greater impact on supply chains if the outages go on for too long.
It’s currently unknown who was behind the cyber attack, nor what the nature of it was, whether that be politically motivated, financial or something else.
Being such a major company whose operations are critical to countless other organisations globally, ThyssenKrupp has been targeted in attacks before.
The group was hit by the infamous Conti ransomware gang back in 2020. The group listed the company’s data on its leak site in September, a listing that has been seen by over 100,000 people.
It is unclear whether the incident led to any material loss or a data leak.