EMCOR: Victim of Ryuk ransomware, one of the largest companies

Club EMCOR, one of the largest Companies of the world, according to the Fortune 500 list, fell victim to ransomware attack. The company is headquartered in USA and specializes in engineering and industrial services. Last month, EMCOR revealed that it had been "hit" by Ryuk ransomware, with the result that they are put some off systems her.

The incident took place on 15 February.

At present, there are no details of the attack and its aftermath. But the message that ransomware was announced attack, is still there website of the company, almost three weeks after attack.

According to EMCOR, not all of them were affected systems. The company said that “some only IT systems were affected ”, which were probably closed to limit infection.

The company said it immediately began to restore them services, but did not specify whether he paid the ransom to hackers or if the systems were restored via duplicates security.

No data to steal data

EMCOR reported that there is no evidence that they were affected or stolen data of employees or customers.

EMCOR made this clarification because, in recent weeks, several ransomware gangs have been stealing data companies before they encrypt the systems, and then threaten to leak them online.

However, Ryuk ransomware does not use this technique (at least yet). This behavior has been observed with ransomware groups such as Revil (Sodinokibi), the Maze, the Nemty, the DoppelPaymer and PwndLocker.

In its financial report for the fourth quarter of 2019, EMCOR stated that it included losses caused by the shutdown due to the ransomware attack. However, he did not exactly mention the losses.

The EMCOR Group is made up of more than 80 smaller ones companies, operating in more than 170 locations worldwide and employing more than 33.000 employees. Last year, it posted revenue of $ 9 billion.

EMCOR is not, of course, the only major ransomware company to attack. Instead, it is on the long list of the largest companies in the world that have experienced a similar incident.

In the same list, include DOD contractor, the law firm Epiq Global, the railway company Railworks of North America, Croatia's largest oil company, INA Group, the manufacturer of spare parts Fisherman and the French ISP and cloud provider, Brittany Telecom.