Germany
DEU
Ransomware at AEP halts pharmaceutical order processing and deliveries
AEP detected a targeted cyberattack on 28 October 2024 that partially encrypted its IT systems. The pharmaceutical wholesaler disconnected external connections and shut down affected systems; orders could not be booked or delivered, and previously received orders missed scheduled delivery. AEP supplies more than 6,000 pharmacies, and the company remained unable to supply pharmacies for a little over a week before progressively restoring ordering and deliveries on 6 November.
80
Estimated severity
80 / 100
95
Source reliability
95 / 100
Approximate Date
28/10/2024
Targeted Company
AEP
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Germany
Affected countries
Germany
Impacted regions
No information
Operational Impact
Duration
9 days
Financial impact (USD M)
No information
Impact types
Order processing disruptionOrder fulfillment or delivery disruptionDownstream customer disruption
Affected sectors
Pharmaceuticals & Life SciencesWholesale & Distribution
Affected departments
Information TechnologyOrder ManagementDistribution & Fulfillment
Attack Profile
Attack types
Ransomware
Attributed threat actors
No information
Sources
Incident Sources
pharmazeutische-zeitung.dehttps://www.pharmazeutische-zeitung.de/massiver-cyberangriff-auf-aep-151028/pharmazeutische-zeitung.dehttps://www.pharmazeutische-zeitung.de/aep-liefert-wieder-151184/heise.dehttps://www.heise.de/en/news/Cyber-attack-on-pharmaceutical-distributor-AEP-10001220.htmlapotheke-adhoc.dehttps://www.apotheke-adhoc.de/nachrichten/detail/markt/aep-gehackt-dienstagslieferung-entfaellt/