Cyber Incident Victim: AB Texel
Date:
Feb 2024
Location:
Netherlands
Summary
AB Texel experienced a ransomware attack attributed to the Cactus group, prompting immediate recovery efforts while maintaining uninterrupted operations and customer service. The organization confirmed no disruption to its services or deliveries, continuing normal business activities and keeping stakeholders informed. Authorities including law enforcement and the Dutch Data Protection Authority were notified, with the company emphasizing the seriousness of the incident through formal reporting procedures.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On February 15, 2024, AB Texel fell victim to a cyberattack perpetrated by the Cactus ransomware group, prompting an immediate launch of recovery operations. The company confirmed the ransomware incident disrupted its systems but emphasized its services remained operational throughout the attack, maintaining customer deliveries without interruption. Internal teams prioritized containment and restoration efforts, though the specific technical scope of compromised infrastructure or data exfiltration was not publicly disclosed. AB Texel initiated communications with both customers and employees to provide updates on the situation, underscoring transparency while continuing business operations. The attack’s timing and initial entry vectors were not detailed in official statements, leaving the precise duration of system compromise unclear. No explicit reference to data encryption, ransom demands, or payment negotiations appeared in the company’s announcement.
AB Texel treated the incident with high severity, filing a formal report with law enforcement authorities and submitting a mandatory breach notification to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) in compliance with regulatory obligations. The company’s public declaration avoided confirming or denying whether personal data or sensitive business information was accessed or stolen during the intrusion. Operational continuity was repeatedly stressed, with AB Texel asserting no degradation in customer-facing services or supply chain logistics despite ongoing recovery activities. The organization did not disclose remediation timelines, forensic investigation partners, or specific security enhancements implemented post-incident. Communications concluded with a reaffirmation of operational resilience and commitment to stakeholder updates as the situation evolved.