French IT giant Sopra Steria said in an official statement today that the Ryuk ransomware attack it suffered in October will lead to large financial losses – between $40 million and $50 million.
Sopra Steria is a European information technology company with 46,000 employees in 25 countries, providing a wide range of IT services, such as consulting, systems integration and software development.
“The restoration and the different levels of unavailability of the various systems from October 21 are expected to have a serious negative impact on the company – between 40 million and 50 million euros,” Sopra Steria said. “The Group’s insurance coverage for cyber risks amounts to 30 million euros.”
Ryuk's attack
Sopra Steria released a statement on October 21 about a cyberattack that hit its network on the afternoon of October 20 but did not provide details about who was behind the attack.
However, BleepingComputer had information from a source that the French company was hit by the Ryuk ransomware, which also encrypted Universal Health Services ' systems in September.
Sopra Steria confirmed in a statement sent to BleepingComputer that it was indeed a Ryuk attack using a new version of the Ryuk ransomware.
No data has been leaked after the ransomware attack
The ransomware attack was blocked by Sopra Steria's internal security and IT teams, who isolated the ransomware to a "limited part of the Group's infrastructure", thus protecting the data , as well as its customers and partners.
“At this stage, Sopra Steria has not identified any data leakage or damage caused to information ,” Sopra Steria said.
The recovery process that the company began on October 26 is almost complete. Access to almost all of their “workstations, R&D, production servers, as well as internal tools and applications” has been restored.
