Microbix faces ransomware attack, says no ops impact

Executive Summary

• Microbix Biosystems Inc. confirmed a ransomware attack on a corporate server by an international hacker group, resulting in the theft of commercially sensitive and employee data.
• The company successfully recovered the corrupted server without material disruption to operations; no operational, safety, or communication systems (including email) were affected.
• Microbix has adopted a strict policy of not paying ransoms and is actively upgrading its IT security infrastructure, including adopting CIS frameworks and enhancing employee training.

Key Details

• Incident Nature: Ransomware attack on a corporate server by an international hacker group targeting manufacturing and life sciences companies.
• Data Impact: While the server was recovered, at least some data was copied externally. The stolen data includes commercially sensitive information and employee data.
• Operational Impact: No material disruption to operations. File storage systems were temporarily offline, but operational, safety, and communications systems remained unaffected.
• Security Response:
  • Microbix will not pay ransoms or engage with hackers.
  • Ongoing upgrades to software and IT security systems since early 2022.
  • Implementation of cloud-based ERP and electronic quality management system (eQMS) software.
  • Adoption of Center for Internet Security (CIS) frameworks.
  • Comprehensive, company-wide employee cybersecurity training.
  • Endpoint server protection for real-time threat monitoring.
  • Regular, redundant, and off-line backups of critical information.
  • Continued work on disaster-recovery and business-continuity planning.
• Stakeholder Notification: The release serves as a notification to customers, employees, investors, and suppliers to maintain vigilance.

Notable Quotes

• "Microbix regrets any impacts of international cybercrime and is continuing to improve its IT security at all levels. We appreciate the understanding of all stakeholders as Microbix, like so many targeted companies, adapts to increasing frequency and sophistication of cyber threats." — Cameron Groome, CEO & President