ConVista Consulting AG

ConVista Consulting AG, also known as ConVista Group, is a consulting firm organized as an Aktiengesellschaft under German law.
The company’s headquarters are located in Germany.
As indicated by its name, the organization provides consulting services to clients.

On 10 October 2022, ConVista Group experienced a significant IT outage that was attributed to a targeted cyberattack.
The attackers exploited a previously unknown zero-day vulnerability to gain access to the organization’s systems.
This breach led to the widespread encryption of data through ransomware deployment.
The ransomware encryption affected multiple systems across the IT environment.

Forensic analysis confirmed that no data exfiltration had been verified at that time.
However, the possibility of data exfiltration remains under active investigation.
The incident was disclosed in a press release published on pressebox.de.

To contain the spread of the ransomware, ConVista immediately isolated the affected systems from the corporate network.
This network segmentation was intended to limit further propagation of the malicious code.
The isolation effort resulted in disruptions to email communication channels for a period.
Despite these communication challenges, the organization reported that its operations with clients and partners continued largely uninterrupted.

ConVista has prioritized ongoing incident analysis to understand the full scope of the attack.
The organization is also engaged in a secure rebuilding of its IT infrastructure to restore normal operations swiftly.