Logistics Giant Suffers Ransomware Attack and Data Breach

Hellmann Worldwide Logistics, an international logistics giant headquartered in Germany, suffered a ransomware attack in early December 2021 and recently confirmed that a data breach took place as well. During the ransomware attack that occurred on December 9th, Hellmann shut down its central data center and began an investigation with external security specialists. The threat actors responsible for the attack exfiltrated sensitive files from the accessed systems before the shut down and Hellman confirmed this in a recent update posting linked below. The firm has yet to confirm the extent of the exfiltrated data but did discuss that the number of fraudulent calls and emails regarding payment transfers as well as bank account details have increased since the attack. BleepingComputer recently identified the threat actor responsible for the ransomware as RansomXXX, who published Hellmann Worldwide data on their leak site. The identified stolen data contained approximately 70.6 gigabytes (GB) of “documents, credentials, correspondence, agreements, orders, etc.” Hellman Worldwide Logistics has not published any updates regarding the identification of the threat actor responsible, and CTIX analysts will continue to monitor for advancements from this incident.