Weir Group, an engineering giant based in Sweden, was recently subjected to a “sophisticated attempted ransomware attack” in September 2021. Weir Group published an article titled “Q3 trading update and cybersecurity incident” on October 7, 2021, which is linked below, that described how the firm is managing the repercussions of the attempted attack. The Group explained that the firm’s cybersecurity controls and systems responded to the sophisticated attack by “isolating and shutting down IT systems including Enterprise Resource Planning (ERP) and engineering applications”. The firm confirmed, however, that the specified applications are partially restored and that additional applications are being restored “in a progressive manner in order of business priority”. A forensic investigation is ongoing, and Weir Group stated that currently “there is no evidence that any personal or other sensitive data has been exfiltrated or encrypted”. The firm also confirmed that they, as well as any person associated to them, have not communicated with the threat actors behind the attempted ransomware attack. CTAPT analysts will monitor all news surrounding Weir Group’s ongoing forensic investigation for any additional outcomes.