Sobeys

The organisation operates as a Canadian grocery and pharmacy retailer, conducting business under the Sobeys and IGA banners. It offers a range of food products, household items, and pharmacy services to consumers across the country. Its stores provide both in‑person shopping and prescription fulfillment capabilities. The retailer serves a broad market of Canadian shoppers seeking everyday essentials.

The company maintains a national network of stores that spans multiple provinces, as indicated by the incident description referencing disruption across its national network. This nationwide footprint allows it to serve customers in diverse geographic regions throughout Canada.

In November 2022, the retailer was targeted by a ransomware attack carried out by the Black Basta group, which encrypted systems and likely accessed personal information. The attack disrupted IT systems across the store network, leading to intermittent service delays and technical difficulties in prescription fulfillment. Despite the disruption, point‑of‑sale systems remained operational due to network segmentation that isolated them from the compromised infrastructure. Following the incident, the organisation notified provincial privacy regulators as required by data breach obligations. Observations from related incidents indicate that ransom demands associated with Black Basta attacks have exceeded two million dollars. The Black Basta ransomware strain has been linked to prior Qbot infections and is suspected of having ties to the FIN7 cybercrime group.