Olympus, a multinational medical technology giant headquartered in Japan, has recently begun investigating a cybersecurity incident that impacted a portion of its EMEA (Europe, Middle East, Africa) IT systems. The company released an initial statement on the incident on September 11, 2021, but updated their statement today to confirm that the cybersecurity incident was an “attempted malware attack” that impacted sections of the company’s sales and manufacturing networks in EMEA. Olympus also explained that “upon detection of suspicious activity, [the company] immediately mobilized a specialized response team including forensics experts,” as well as “suspended data transfers in the affected systems.” The statement also confirmed that “no evidence of loss, unauthorized use or disclosure of our data has been detected” thus far in the investigation and that there is no evidence of this incident affecting systems outside of EMEA. Olympus has yet to confirm the threat group responsible for the attempted malware attack; however, TechCrunch released a report this past weekend that discussed ransom notes left after the incident pointing to the BlackMatter ransomware group, as the ransom notes contained a Tor website that is claimed to have been used by BlackMatter previously to communicate with its victims. Olympus’ investigation into the cybersecurity incident is still evolving, and CTAPT analysts will provide updates as well as confirmation of the threat group involved once additional information is released.