Sobeys Capital ransomware disrupts pharmacy and grocery-retail operations

An employee executed a phishing file on 14 October 2022, giving an intruder initial access to Sobeys Capital systems. Ransomware encryption was established on 4 November. The event and precautionary shutdowns halted pharmacy services for four days, impaired checkouts, gift cards and loyalty redemptions for approximately a week, reduced some product availability and disabled planning tools for several weeks. Grocery stores largely remained open. Black Basta attribution appears in independent security reporting but was not confirmed by the company.