Cyber Incident Victim: Porr
Date:
May 2019
Location:
Austria
Summary
An Austrian construction firm experienced a cyber attack targeting its communication systems, causing disruptions to telephone and email services. The incident involved a virus that was successfully identified, with technical teams actively working to resolve the issue, though potential impacts remained unclear. The organization confirmed that no sensitive data was compromised during the event.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 2, 2019, Austrian construction company Porr detected a cyber attack targeting its communication infrastructure, leading to immediate operational disruptions. The incident compromised telephone systems and email services, hindering internal and external communications. Company technicians identified the cause as a virus infection but did not publicly disclose the specific malware variant involved. Porr's corporate spokesperson confirmed the attack's occurrence on the same day, noting that response teams were actively engaged in diagnostic and containment efforts. The disruption occurred during business hours on Thursday, though the exact time of initial detection remained unspecified. No evidence suggested data exfiltration or compromise of sensitive information at this stage, according to the company’s initial assessment.
Technical personnel prioritized isolating affected systems to prevent further propagation of the virus while attempting to restore communication channels. The company issued a public statement emphasizing that core business data remained secure despite the infrastructure outage. Recovery timelines and financial impact projections were unavailable during the initial response phase, with the spokesperson stating it was too early to quantify damages. No ransomware claims or threat actor attributions were reported by Porr or external investigators in the immediate aftermath. Operations continued with reduced communication capacity as technicians worked to implement remediation measures. The incident did not trigger regulatory disclosures beyond the initial public announcement, reflecting Porr’s assessment of contained data risks.