The Cactus ransomware group has plunged French energy giant Schneider Electric into turmoil, announcing its success in pilfering a substantial 1.5TB of data from the company’s systems. Schneider Electric confirmed the ransomware attack on its Sustainability Business division, which occurred on January 17 and impacted vital systems such as Resource Advisor. In response, the company promptly mobilized its Global Incident Response team, working diligently to contain the breach and bolster existing security measures.
Despite the breach affecting the Sustainability Business division and the theft of data, Schneider Electric assured stakeholders that its isolated network infrastructure prevented any spill-over into other entities within the company. The affected division promptly informed impacted customers, and Schneider Electric is actively collaborating with relevant authorities to analyze the incident and determine necessary actions. The Cactus ransomware group, notorious for its bold claims, has asserted that the stolen data—comprising critical information from Schneider Electric—will be released if a ransom is not paid.