Schneider Electric hit by ransomware as Cactus claims data theft
Schneider Electric was hit by a ransomware attack in January 2024. Cactus claimed it had stolen 1.5TB of data in the breach and released images of passports and non-disclosure agreement documents, among other files. The company subsequently worked to recover from the ransomware damage.
Key facts
- Affected organization
- Schneider Electric
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- Claimed theft of 1.5TB of data; some files released, including images of passports and non-disclosure agreements
- Cause / method
- Cactus ransomware attack
- Location
- France
If your data was exposed
Exposed dataID document copy
Timeline
- Cactus claimed it had stolen 1.5TB of data in the January breach of Schneider Electric and released some of the files.
- Claims of large-scale data theft emerged as Schneider Electric worked to recover from the ransomware damage.
4 related reports
Other incidents at Schneider Electric
Schneider Electric and Emerson named as victims of Oracle hack
↳ Knock-on damage from the Oracle incident · View original incidentSchneider Electric and Emerson were named as victims of the Oracle hacking incident. The specific scale of the damage, the attack method and the response have not been confirmed.
Read on SecurityWeek ↗Schneider Electric hack leaks 40GB of data
Impact: 40GB of data
Schneider Electric was hit by a cyberattack in which data was stolen. The attack group Hellcat demanded a ransom, and in December 2024 it emerged that 40GB of data had been leaked on the dark web.
Related reports: 4 · last report →Schneider Electric data stolen in breach of internal development platform
Impact: Theft of data from internal platforms
Schneider Electric confirmed that hackers had accessed its internal project execution tracking platform and breached a development platform. The hackers stole data, and the hack and extortion followed a Lumma infostealer infection. The attack was reported to be the third cyber incident in 18 months.
Related reports: 4 · last report →Schneider Electric's sustainability business hit by ransomware
Schneider Electric's sustainability business division was hit by a ransomware attack in January 2024. The company confirmed the attack on the division, which was linked to the Cactus ransomware.
Related reports: 9 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.