ista International
| Primary URL | Location | Industry | www[.]ista[.]com |
Country
Germany
|
Utilities
|
|---|
Profile
The organization is known by the alias Ista International. Its headquarters are located in Germany.
On August 8, 2022, Ista International suffered a ransomware attack. The attack was carried out by the threat group known as the Daixin Team. The attackers claimed to have encrypted thousands of servers and petabytes of data, including backups. Initial access was obtained by exploiting an unprivileged user account. Using that foothold, the attackers achieved full administrative control across multiple international domains. During the encryption process, the threat actors disabled security features. They also blocked administrator accounts to hinder defensive actions. As a result of the attack, the company took all potentially affected IT systems offline. This action caused service disruptions for customers.
Negotiations between Ista International and the Daixin Team failed to reach an agreement. Following the failed negotiations, the Daixin Team began leaking stolen data on their dark web site. The organization engaged internal and external experts to investigate the breach and remediate the affected systems. Relevant authorities were notified as part of the incident response. The incident was reported by cybersecurity news outlets, including Databreaches.net.