CSIDB logo
Incident

Umanis

Incident posture

Attack window
Nov 2020
Location
France
Status
Historical
CIA posture
Available to members
Updated
2025-11-21 00:00

Linked entities

Victim
Umanis
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Nov 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Umanis experienced a cyberattack reportedly involving NetWalker ransomware, though the company did not confirm this attribution. The organization contained the threat by rapidly isolating affected systems and disconnecting its network and applications to prevent further spread, causing temporary operational disruption. These protective measures were implemented to safeguard customer and partner data during the incident response.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

Umanis, a digital services company, experienced a cyberattack on November 14, 2020. The company publicly disclosed the incident on the morning of November 16 through an official press release and social media communications. Umanis characterized the event as part of broader cyberattacks affecting multiple organizations during this period. The company implemented immediate containment measures upon detecting the attack, successfully halting the spread of the malicious activity through network isolation protocols. As a protective measure for clients and partners, Umanis disconnected its entire computer network and application systems throughout the weekend following the initial compromise.

The incident response actions included maintaining system disconnections while containment and protective measures were executed. Umanis did not confirm operational details regarding attack vectors, data compromise, or specific malware variants in its initial communications. External cybersecurity reporting from LeMagIT suggested potential involvement of NetWalker ransomware operators, though this attribution remained unverified by the company. The disclosure emphasized protective measures for external stakeholders but did not provide technical specifics regarding affected infrastructure, business impacts, or recovery timelines. No further details about data exfiltration, ransom demands, or financial consequences were included in the initial public statements from Umanis.

Sources

Sources available to members: 1 source.

CSIDB