Atos now says that its systems have not been hit by a ransomware attack after all
- The threat actor claimed to have breached Atos in late December 2024
- The company confirmed that the incident involved an “unrelated third party.”
- Adds that the threat actors have stolen documents “mentioning” the name Atos.
Atos has denied previous claims of a ransomware attack, noting that it was a third party unrelated to the company that was actually breached.
In late December 2024, a ransomware actor named Space Bears added Atos to its data breach website, claiming to have compromised an internal company database. However, the claims were not supported by concrete evidence, as usual items such as ransom demands or data samples were missing.
The French IT giant still took the matter seriously and investigated the allegations, and has now released an update confirming that no direct breach occurred, but some consequences of the attack may still occur.
Space bears
“Atos Group today announces that the allegations made by the Space Bears ransomware group about compromising the Atos organization are unfounded,” the announcement reads. “No Atos-managed infrastructure was compromised, no source code was accessed, and no Atos IP or Atos proprietary data was disclosed.”
However, the company said that remote third-party infrastructure, which was not connected to Atos, had been accessed. “This infrastructure contained data that included the company name Atos, but is not managed or secured by Atos,” the company concluded.
The IT company also highlighted that it has a “global network of more than 6,500 specialized experts and 17 new generation Security Operations Centers (SOCs) operating 24/7 to ensure the security of the Group and its customers.”
Space Bears is a relatively young ransomware company that emerged in early 2024. It still managed to add some high-profile targets to its belt, including Canadian software development company Haylem and two related companies, Un Museau Vaut Mille Mots and Lexibar.
Other attacks by the group in December 2024 included Canada’s JRT Automation and India’s Aptus.
Ny Breaking asked the company for further details last week, but we did not immediately receive a response.
Via The registry