What Happened
In October 2022, European IT services provider Sopra Steria (likely the intended “Soproni,” referring to this incident) suffered a ransomware attack using a new variant of Ryuk malware, detected on October 20-21, which compromised a limited portion of its IT infrastructure including Active Directory systems. The company’s internal cybersecurity teams quickly contained the threat, preventing any confirmed data exfiltration or damage to customer information systems, though remediation efforts and system unavailability led to estimated financial losses of €40-50 million (with €30 million covered by insurance). No specific number of records exposed was reported, as the focus was on operational disruption rather than customer data theft, and full recovery of workstations, servers, and customer connections was achieved by late November without significant impact on Q4 sales.
