BRP (Bombardier Recreational Products) was riding high on August 8, 2022. One day removed from introducing its latest Can-Am, Sea-Doo, Rotax, Alumacraft, and Manitou lineups at the Club BRP 2023 event, the future seemed bright for the Canadian company. That is until a cyberattack crippled the conglomerate’s operations and production.
Ransomware gang RansomEXX promptly took credit for the “malicious cyberactivity”, stealing 29.9GB of files pertaining to non-disclosure agreements, passports, IDs, contracts, and supply agreements. RansomExx (aka Defray777 and Ransom X) is a human-operated ransomware variant that targets corporations by stealing personal data and encrypting internal files. If the company refuses to pay a ransom for decrypting the files, RansomExx threatens to publicize the looted information.
