IT services giant Sopra Steria has announced that last month’s cyber attack on its systems is likely to cost the company up to €50 million.
In an update published on its website, the NHS supplier admitted that the ransomware attack would negatively impact its gross operating margin by between €40 million (£35.6m) and €50 million (£44.5m).
The French company also revealed that its insurance coverage for cyber risks totals €30 million (£26.7m). IT Pro contacted its representatives about the details of the insurance coverage but is yet to hear back from the company.
Sopra Steria stated that the large costs of the cyber attack, a new variant of the infamous Ryuk ransomware, can be attributed to “the remediation and differing levels of unavailability of the various systems since 21 October”, the day when the incident was detected.
However, the IT services giant added that “sales activity for the fourth quarter should not be significantly affected by this event”.
“For financial year 2020, Sopra Steria expects to see negative organic revenue growth of between 4.5% and 5.0% (previously “between -2% and -4%”), an operating margin on business activity of around 6.5% (previously “between 6% and 7%”), and free cash flow of between €50 million and €100 million (previously “between €80m and €120m”),” it said.
Ryuk is a popular strain of malware which last month was reported to be targeting some 20 organisations a week as well as forcing a number of US hospitals offline. It is believed to have compromised Sopra Steria's Active Directory infrastructure and encrypted portions of the company's network.
However, according to the company, the attack was “rapidly blocked thanks to in-house IT and cyber security teams”.
“The measures implemented immediately made it possible to contain the virus to only a limited part of the Group’s infrastructure and to protect its customers and partners,” it added.
Sopra Steria also confirmed that the incident had not caused any further breach of data, saying that it had not identified “any leaked data or damage caused to its customers’ information systems”.
Since the cyber attack, the company has managed to restore access to its workstations, R&D and production servers, in-house tools and applications, as well as customer connections.
-
Enterprises can’t keep a lid on surging cyber incident costsNews With increasing threats and continuing skills shortages, AI tools are becoming a necessity for some
-
UK software developers are still cautious about AI, and for good reasonNews Experts say developers are “right to take their time” with AI coding solutions given they still remain a nascent tool
-
Volkswagen confirms security ‘incident’ amid ransomware breach claimsNews Volkswagen has confirmed a security "incident" has occurred, but insists no IT systems have been compromised.
-
The number of ransomware groups rockets as new, smaller players emergeNews The good news is that the number of victims remains steady
-
Teens arrested over nursery chain Kido hacknews The ransom attack caused widespread shock when the hackers published children's personal data
-
NCA confirms arrest after airport cyber disruptionNews Disruption is easing across Europe following the ransomware incident
-
Cyber professionals are losing sleep over late night attacksNews Hackers are biding their time and launching attacks when businesses can’t respond
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
