Security Breach – 20 Dec 2024

cybersecurity - xmas

Security Breach – 20 Dec 2024

As the end of 2024 draws near, many business owners are wondering what the cybersecurity landscape will look like in 2025. One thing’s for sure: They will certainly face familiar challenges and some surprises in the coming year. While IT professionals are confident in their ability to defend against phishing and ransomware, organisations are shifting their investment focus toward proactive cybersecurity strategies. The majority of businesses have accepted that they are likely to become involved in cyber trouble at some point. More companies have cyber insurance than we’ve ever recorded. With cybersecurity always evolving, defenders are constantly adopting new technologies and advanced strategies. However, it’s also important to remember that cybercriminals are equally relentless in their innovation.

Recent Breaches

Japan – Kurita Water Industries – Energy & Utility

Exploit: Ransomware

Risk to Business: Moderate: Kurita Water Industries, a Japanese water treatment company, confirmed that ransomware actors stole data and encrypted servers at its U.S. subsidiary, Kurita America, on November 29. The breach affected multiple servers, which were disconnected from the network. The company acknowledged that customer, business partner, and employee data may have been exposed to third parties. Despite the incident, Kurita reported that business operations have not been disrupted, as main servers have been restored. The company is continuing its investigation into the breach. Kurita, founded in 1949, creates chemicals for water and wastewater treatment.

United States – Krispy Kreme – Retail & eCommerce

Exploit: Hacking

Risk to Business: Severe: Krispy Kreme reported a cyberattack that began two weeks ago, affecting online ordering in parts of the U.S. The company discovered unauthorised activity on its IT system on November 29 and began an investigation. While all stores remain open, the attack is causing operational disruptions, particularly in digital sales. Krispy Kreme warned that the incident could significantly impact business operations due to lost revenue and recovery costs, including fees for cybersecurity experts, noting that its cyber insurance will cover some costs. The company is working with external experts and has notified federal law enforcement. No hacking group has claimed responsibility for the attack.

Talk to a TCT team member today about implementing cyber security plan for your business.

Robert Brown
20/12/2024

Related Articles:
Why use Airplane Mode – Even when not Travelling
How Password Managers Protect Your Accounts