Canadian supermarket chain Sobeys hit by ransomware attack

Canadian supermarket and pharmacy chain Sobeys is recovering from a cyberattack that may have involved Black Basta ransomware.

Sobeys is the second largest supermarket chain in Canada and a wholly owned subsidiary of Empire Company Limited, which operates more than 1,500 stores across the country, under brands such as Foodland, IGA, Lawtons, Needs, Safeway, and more.

On November 7, Empire revealed that it had been the victim of a cyberattack that affected certain in-store systems in its supermarkets, as well as its pharmacies. On Friday, the company was able to fully restore the impacted systems of its pharmacies.

“Our stores are currently experiencing system issues that affect some of the services offered. All of our stores remain open to serve you and are experiencing no major disruptions at this time.

“While some in-store services are operating intermittently or with a delay, we are pleased to note that our pharmacy network is now able to operate fully,” a notification on Sobeys’ website reads.

Last week, the company reportedly notified Canadian privacy bodies that it had suffered a data breach, suggesting that personal information may have been compromised in the incident.

Although the company did not share specific information about the type of cyberattack it suffered, ransomware attacks are usually the cause of prolonged system disruptions.

The attack appears to have involved Black Basta ransomware, but safety week found no mention of the Sobeys incident on the gang’s leaked website.

Black Basta was initially observed in April 2022, but quickly rose to fame, becoming one of the most prevalent ransomware families in about two months. In early November, cybersecurity firm SentinelOne linked Black Basta to FIN7, a notorious Russian cybercrime group.

The attack on Sobeys was carried out around the same time as Canadian meat giant Maple Leaf Foods disclosed a cyberattack causing system disruptions.

Related: Hackers leak Australian health records on dark web

Related: Canadian Meat Giant Maple Leaf Foods Disrupted by Cyberattack

Related: BlackByte Ransomware abuses legitimate driver to disable security protections

Ionut Argire is an international correspondent for SecurityWeek.

Previous columns by Ionut Arghire:
Key words:

About Terry Gongora

Check Also

Tropical Storm Nicole – Early prescription renewals allowed in a state of emergency

Contact: Communications Office [email protected] 850-245-4111 On November 7, 2022, Governor Ron DeSantis issued Executive Order …