Cyber Incident Victim: Systex
Date:
Mar 2025
Location:
Taiwan
Summary
Systex received an anonymous online ransom letter and promptly initiated cooperation with the MJIB while engaging internal and external cybersecurity experts to trace the incident, determine its cause, and review system security. The investigation continues with no reported significant effect on the company's operations, and the firm has responded by strengthening monitoring and protective measures to improve overall information security.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 31, 2025, Systex received an anonymous online ransom letter, which the company identified as the cause of the cybersecurity incident. The receipt of the letter triggered the incident response process. No further details about the letter's content are provided in the source.
Upon receiving the ransom letter, Systex began cooperating with the MJIB in its investigation of the incident. The company also engaged both internal and external cybersecurity experts to trace the incident, identify its cause, and thoroughly review its system security. These efforts were undertaken to understand the scope of the breach and to determine any compromised assets. The company stated that it is fully cooperating with the authorities and experts throughout the process.
Systex reported that the investigation is still ongoing and, as of the disclosure, the incident has not had a significant impact on the company's operations. No insurance claims are anticipated, as indicated by the N/A designation for potential claim amounts. In addition to the investigative cooperation, the company has enhanced monitoring and protective measures to strengthen cybersecurity and safeguard information security. The company stated that the enhanced monitoring and protective measures aim to strengthen cybersecurity and safeguard information security.