Incident

CWT ransomware attack

incident:cwt_ransomware_attack Also: CWT hack

Ransomware incident involving theft of two terabytes of data, encrypted systems, and a negotiated ransom.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing COMPROMISES Carlson Wagonlit Travel Company Explicit 178
outgoing INVOLVES Ransomware Explicit 178
outgoing INVOLVES Data exfiltration Explicit 178

Claims

CWT ransomware attack COMPROMISES Carlson Wagonlit Travel Company

The CWT ransomware attack compromised Carlson Wagonlit Travel Company’s network and rendered many computers unusable.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“Then they infected the network with ransomware.”

Jack Rhysider · offsets 7515–7562

“Ransomware rendered a lot of their computers worthless”

Jack Rhysider · offsets 7760–7814

CWT ransomware attack INVOLVES Ransomware

The CWT attack involved ransomware.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“Then they infected the network with ransomware.”

Jack Rhysider · offsets 7515–7562

CWT ransomware attack INVOLVES Data exfiltration

The attackers stole two terabytes of data from CWT.

Explicit Confidence 99% · Jack Rhysider EP 178 Details

“The hackers stole two terabytes of data.”