World’s leading dairy group Lactalis hit by cyberattack

World's leading dairy group Lactalis hit by cyberattack

Lactalis, the world’s leading dairy group, has disclosed a cyberattack after unknown threat actors have breached some of the company’s systems.

Lactalis (short for Lactalis Group) has 85,000 employees in 51 countries, and it exports dairy products to over 100 countries around the world.

The dairy group controls multiple leading international brands, including PrĂ©sident, Galbani, Lactel, Santal, and Parmalat.

In a press release published on Friday, Lactalis says that only a limited number of computers on its network were compromised during the attack.

“The Lactalis Group has detected an intrusion on part of its IT network,” the company said. “We immediately took steps to contain this attack and have notified the competent authorities.”

“The results of our investigations establish that a malicious third party seeks to break into our servers.”

No data breach following the attack

The dairy giant added that there was no data breach to report according to an ongoing investigation of this incident.

“Our IT teams are fully mobilized and supported by experts recognized in cybersecurity,” the press release reads. “Our investigation with them revealed no data breach at this point.”

Lactalis has also taken IT systems offline on all company sites impacted by the cyberattack.

“Lactalis teams are working to protect the interests of our customers, our partners, and our employees,” the company added. “This is why we have restricted, at our initiative to as a preventive measure, our access to the public internet network.”

While Lactalis said that no data has been stolen during the attack, threat actors commonly steal sensitive information and document while spreading through a compromised network.

Such attacks often lead to extortion attempts and the stolen data being published on data leak sites if a ransom is not paid.

h/t chum1ng0


Update: After the article was published, a Lactalis spokesperson sent the following statement:

We had detected an attack on part of our IT network. The measures to limit the impact of this incident were taken immediately and the relevant authorities have been notified.

As a precautionary measure, we have taken the initiative to limit our access to the public internet network and we are working to carry out all our activities under the usual conditions.

The conclusions of investigations carried out have determined that a malicious third party is trying to break into our servers. Our IT team has fully mobilized in response to this regrettable incident, with the support of cyber security experts.

No data breach has been identified at this stage and we continue to operate normally in line with our commitments.


Source: BleepingComputer

Leave a Reply