BRP (Bombardier Recreational Products)

BRP (Bombardier Recreational Products) is a Canadian manufacturer of Ski-Doo snowmobiles, Sea-Doo jet skis, ATVs, motorcycles, jet skis and Rotax engines.

History

2022: RansomEXX Attack

On August 8, 2022, BRP reported a cyber attack that temporarily halted all of the firm's operations. The RansomEXX ransomware gang claimed responsibility for the attack.

The production shutdown also affected production and caused delays in some transactions with customers and suppliers. On August 15, BRP announced that all production sites had already restored their work.

According to BRP, hackers hacked into its systems with a supply chain attack. Malware infiltrated through a third-party service provider. The BRP believes the cyberattack only affected its internal systems. BRP said there was no evidence at the end of August 2022 that the personal information of customers may have been affected by the attack. BRP has promised to notify customers directly if it detects a data breach.

On August 23, the RansomEXX group published 29.9 GB of stolen BRP files on its onion leak site. The files include nondisclosure agreements, passports and employee IDs, material supply contracts, contract renewals and more. The data breach does not contain sensitive customer data. However, the disclosure of the stolen documents is detrimental to the BRP.

On August 24, the company confirmed that the documents were genuine. The BRP also added that it actively supports the affected parties to mitigate the negative effects of the attack. Employees were provided with the necessary resources, including credit monitoring services. ^[1].

Notes