Germany
DEU
Cyberattack at METRO disrupts wholesale payment processing and online orders
METRO was hit by a cyberattack on 17 October 2022 that disabled parts of its IT infrastructure. Stores in several European countries used offline payment workarounds and METRO warned of disruptions or delays in online order processing and operational customer services. The company subsequently reported lost sales, inefficiencies and higher costs; stores remained open and it did not confirm a full distribution shutdown.
80
Estimated severity
80 / 100
95
Source reliability
95 / 100
Approximate Date
2022-10-17
Targeted Company
METRO
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
Austria
AUT
France
FRA
Target country
Germany
Affected countries
AustriaGermanyFrance
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionOrder processing disruptionService degradation
Affected sectors
Wholesale & Distribution
Affected departments
Information TechnologyOrder ManagementSales
Attack Profile
Attack types
Data exfiltrationRansomware
Attributed threat actors
No information
Sources
Incident Sources
newsroom.metroag.dehttps://newsroom.metroag.de/reports.metroag.dehttps://reports.metroag.de/annual-report/2021-2022/combined-management-report/events-after-the-closing-date-and-outlook/report-on-events-after-the-closing-date.htmlbleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/wholesale-giant-metro-hit-by-it-outage-after-cyberattack/