Cyber Incident Victim: Container World Logistics
Date:
Feb 2019
Location:
Canada
Summary
A ransomware attack targeted a major British Columbia liquor distribution and logistics company, disrupting its operations. The organization refused to pay the ransom, opting instead to shut down systems for over a week to rebuild compromised infrastructure. This prolonged outage caused significant supply chain delays, particularly affecting specialty alcohol products destined for bars, restaurants, and private retailers across the province. The resulting backlog created operational challenges for numerous small businesses and event planners reliant on timely deliveries from the distributor.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On February 14, 2019, ransomware attackers successfully breached the systems of Container World, a British Columbia-based warehousing and logistics company critical to the province's specialty liquor supply chain. The cybercriminals issued a ransom demand, which Container World refused to pay. Instead of negotiating, the company initiated a complete shutdown of its compromised IT infrastructure to isolate the attack and prevent further spread. This operational suspension lasted for more than one week as technicians worked to restore or rebuild affected systems. The extended downtime disrupted Container World's core distribution operations, halting the flow of alcohol products to downstream customers. Bars, restaurants, and private liquor stores across B.C. experienced immediate supply chain interruptions as Container World serves as a primary distributor for many specialty beverage products not available through government liquor stores.

The company's week-long system outage created significant logistical challenges for businesses reliant on timely deliveries. Event planners and small businesses faced particular difficulties fulfilling orders due to the unexpected supply gap. While Container World prioritized system restoration over ransom payment, the recovery process generated operational bottlenecks that persisted beyond the immediate outage period. Customers reported struggling with order backlogs that compounded daily operational challenges during the disruption window. No data theft or secondary impacts beyond the ransomware-induced operational paralysis were disclosed in available reports. The incident highlighted supply chain vulnerabilities within regulated alcohol distribution networks when critical logistics providers experience cyber disruptions.
