ThyssenKrupp, a leading steel giant, faced a cybersecurity breach in its Automotive division, resulting in the shutdown of IT systems to contain the incident. With over 100,000 employees and a substantial annual revenue exceeding $44.4 billion, ThyssenKrupp holds a vital position in the global steel supply chain across diverse sectors like machinery, automotive, and construction. The breach, identified by the Automotive Body Solutions unit’s IT security team, prompted collaborative efforts with ThyssenKrupp Group’s IT security team to mitigate the threat, leading to temporary shutdowns of certain applications and systems.
Despite the breach being contained within the automotive division, ThyssenKrupp assured that other business units remained unaffected, emphasizing the situation was under control, and gradual return to normal operations was underway. The impact of the cyberattack extended to ThyssenKrupp’s Saarland-based plant, disrupting steel production, processing, and research activities. While production halted temporarily, the company assured customers that supply remained unaffected at the time of confirmation.
ThyssenKrupp’s prominence in the global economy has made it a frequent target for cyber threats, with past incidents occurring in 2022, 2020, 2016, and 2013, primarily focused on espionage and operational disruption. Despite no major ransomware groups or threat actors claiming responsibility for the recent attack, the nature of the breach remains undisclosed. As the company continues to fortify its cybersecurity measures, the incident underscores the persistent challenges industries face in safeguarding against cyber threats amidst their critical role in global operations and supply chains.