CSIDB logo
Incident

AB Texel

Incident posture

Attack window
Feb 2024
Location
Netherlands
Status
Historical
CIA posture
Available to members
Updated
2026-01-03 18:46

Linked entities

Victim
AB Texel
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Feb 2024
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

AB Texel experienced a ransomware attack attributed to the Cactus group, prompting immediate recovery efforts while maintaining uninterrupted operations and customer service. The organization confirmed no disruption to its services or deliveries, continuing normal business activities and keeping stakeholders informed. Authorities including law enforcement and the Dutch Data Protection Authority were notified, with the company emphasizing the seriousness of the incident through formal reporting procedures.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On February 15, 2024, AB Texel fell victim to a cyberattack perpetrated by the Cactus ransomware group, prompting an immediate launch of recovery operations. The company confirmed the ransomware incident disrupted its systems but emphasized its services remained operational throughout the attack, maintaining customer deliveries without interruption. Internal teams prioritized containment and restoration efforts, though the specific technical scope of compromised infrastructure or data exfiltration was not publicly disclosed. AB Texel initiated communications with both customers and employees to provide updates on the situation, underscoring transparency while continuing business operations. The attack’s timing and initial entry vectors were not detailed in official statements, leaving the precise duration of system compromise unclear. No explicit reference to data encryption, ransom demands, or payment negotiations appeared in the company’s announcement.

AB Texel treated the incident with high severity, filing a formal report with law enforcement authorities and submitting a mandatory breach notification to the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) in compliance with regulatory obligations. The company’s public declaration avoided confirming or denying whether personal data or sensitive business information was accessed or stolen during the intrusion. Operational continuity was repeatedly stressed, with AB Texel asserting no degradation in customer-facing services or supply chain logistics despite ongoing recovery activities. The organization did not disclose remediation timelines, forensic investigation partners, or specific security enhancements implemented post-incident. Communications concluded with a reaffirmation of operational resilience and commitment to stakeholder updates as the situation evolved.

Sources

Sources available to members: 1 source.

CSIDB