EMCOR Group , one of the world's largest companies , according to the Fortune 500 list, has been hit by a ransomware attack . The US -based company specializes in engineering and industrial construction services. Last month, EMCOR revealed that it had been hit by the Ryuk ransomware , which caused some of its disabled systems . to be
The incident occurred on February 15.
There are currently no details about the attack and its aftermath. However, the message announcing the ransomware attack is still up on website , nearly three weeks after the attack.
According to EMCOR, not all systems. The company said that “only some IT systems were affected,” which were likely shut down to contain the infection.
The company said it immediately began restoring services, but did not specify whether it paid the ransom to the hackers or whether the systems were restored through backups.
No evidence of data theft
EMCOR said there is no evidence that data employee or customer
EMCOR made this clarification because, in recent weeks, several ransomware gangs have been stealing data before encrypting the systems, and then threatening to leak it online.
However, Ryuk ransomware does not use this technique (yet at least). This behavior has been observed with ransomware groups such as Revil (Sodinokibi), Maze, Nemty, DoppelPaymer , and PwndLocker.
In the financial report for the fourth quarter of 2019, EMCOR stated that it included the losses caused by the operational shutdown due to the ransomware attack. However, it did not specify the exact losses.
The EMCOR Group consists of more than 80 smaller companies, operating in more than 170 locations worldwide and employing more than 33,000 people. Last year, it recorded revenues of $9 billion.
EMCOR is not, of course, the only large company that suffers a ransomware attack. On the contrary, it joins the big list of the world's largest companies that have experienced a similar incident.
The same list includes DOD contractor, law firm Epiq Global, North American railroad company Railworks , Croatia's largest oil company, INA Group, parts manufacturer Visser , and French ISP and cloud provider, Bretagne Télécom.

