Automation giant ABB hit by Black Basta ransomware attack

Global automation giant ABB has reportedly suffered a cyberattack by notorious ransomware gang Black Basta. The breach is said to have affected hundreds of company devices. Hundreds of devices at the automation specialist are said to be out of action as an effect of the breach. ABB halted VPN connections with clients to prevent criminals from moving onto other networks. 

Based in Switzerland, the company is one of the world’s leading providers of robotic systems and employs over 100,000 people and reported revenue of $29.4bn last year. Its clients span the public and private sectors.

“ABB operates more than 40 US-based engineering, manufacturing, research and service facilities with a proven track record serving a diversity of federal agencies including the Department of Defense, such as the US Army Corps of Engineers, and Federal Civilian agencies such as the Departments of Interior, Transportation, Energy, United States Coast Guard, as well as the US Postal Service,” the company says. 

The initial ransomware attack is thought to have taken place on 7 May. It is claimed Black Basta attacked the company through its Windows Active Directory, affecting hundreds of devices. According to employees, the attack has disrupted the company’s operations, impacted its factories and delaying projects.

It is not known whether a ransom demand has been issued, or paid, and no data from the company has been spotted on the dark web.