United Kingdom
GBR
ION Markets ransomware disrupts derivatives trading and clearing
An attack that began on 31 January 2023 disabled parts of ION Markets’ Cleared Derivatives service. Banks and brokers were unable to process some exchange-traded derivatives transactions normally, with downstream disruption to trading/clearing and delayed commodity positions reporting as systems were progressively reconnected.
89
Estimated severity
89 / 100
94
Source reliability
94 / 100
Approximate Date
2023-01-31
Targeted Company
ION MARKETS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
ABN AMRO CLEARING (Software vendor)INTESA SANPAOLO (Software vendor)
Geographic Impact
Country Targeted Company
Other Affected Countries
Italy
ITA
Target country
United Kingdom
Affected countries
United KingdomItaly
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionOrder processing disruptionService unavailability
Affected sectors
Finance & InsuranceTechnology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
Ransomware
Attributed threat actors
LOCKBIT
Sources
Incident Sources
iongroup.comhttps://iongroup.com/press-release/markets/cleared-derivatives-cyber-event/investing.comhttps://www.investing.com/news/economy/ransomware-attack-on-data-firm-ion-could-take-days-to-fix-sources-2994622marketscreener.comhttps://www.marketscreener.com/quote/stock/INTESA-SANPAOLO-S-P-A-68944/news/Intesa-Sanpaolo-most-operations-restored-after-ransomware-attack-on-ION-42946141/lse.co.ukhttps://www.lse.co.uk/news/ion-starts-to-bring-clients-back-online-after-ransomware-attack-source-swj5sn0qjsw2fo5.htmlfinance.yahoo.comhttps://finance.yahoo.com/news/1-euronext-delays-commodities-report-160214779.html