Cyber Incident Victim: Strix Group
Date:
Feb 2022
Location:
Isle of Man
Summary
A manufacturer of kettle safety controls experienced a cyber attack attributed to Russian origins, impacting servers in the Isle of Man and the UK. The company restored systems with no disruption to customer orders or sales, engaging external specialists to investigate and implement precautionary IT infrastructure measures. Cybersecurity experts were appointed to monitor operations, provide ongoing support, and recommend procedural improvements following the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around February 27, 2022, Strix Group, an Isle of Man-based manufacturer of kettle safety controls and temperature regulators for small appliances, experienced a cyber attack that disrupted its operations. The company publicly attributed the attack to Russian origins, though no specific threat actor or group was named. The incident affected servers located in both the Isle of Man and the United Kingdom, prompting Strix to take its systems offline as a containment measure while investigating the nature and scope of the breach. External cybersecurity specialists were immediately engaged to assist with the response. Precautionary measures were implemented across the company’s IT infrastructure to limit further exposure. Strix maintained transparency by issuing a statement to the London Stock Exchange, confirming the incident while emphasizing that customer orders and sales remained unaffected throughout the disruption.
Strix restored its systems following the investigation and remediation efforts, though the exact timeline for full recovery was not disclosed. The company appointed cybersecurity experts to continuously monitor its networks, provide ongoing support, and evaluate existing processes and procedures for potential improvements. No data theft, financial losses, or operational delays to production or global exports were reported. Strix committed to providing additional updates as necessary but did not specify whether law enforcement agencies were involved or if regulatory disclosures beyond the stock exchange announcement were made. The incident occurred amid broader warnings about heightened cyber threats targeting the Isle of Man linked to global geopolitical tensions at the time.