Onex

Onex is a Canadian-based private equity firm specializing in acquiring and managing investments across a diverse range of industries. The firm typically focuses on leveraged buyouts, growth capital, and corporate carve-outs, targeting businesses with potential for operational improvement or strategic repositioning. While specific portfolio sectors are not detailed in available incident reports, private equity firms like Onex generally engage with companies spanning manufacturing, technology, healthcare, and financial services. Its investment approach involves active ownership strategies aimed at enhancing portfolio company value through managerial oversight and financial restructuring. The organization operates primarily within North American markets but may pursue international opportunities aligned with its investment criteria.

In January 2023, Onex suffered a significant cybersecurity breach through the exploitation of a zero-day vulnerability in Fortra's GoAnywhere file transfer software. The Russia-linked Clop ransomware gang infiltrated the system, exfiltrating sensitive employee information and tax documentation including W-9 forms. This incident formed part of a broader attack impacting approximately 130 organizations across healthcare, finance, and municipal sectors, with threat actors issuing extortion demands and leaking stolen data publicly. While Fortra released patches following the breach, the company did not publicly clarify the extent of Onex's exposure or specific security shortcomings. The compromise highlighted risks associated with third-party software dependencies in financial data management, particularly for firms handling sensitive tax and employee records. Onex's incident response and mitigation measures following the attack remain undisclosed in public reporting.