Portugal
PRT
LAPSUS$-claimed cyberattack disables Impresa news websites and streaming
On 2 January 2022, attackers compromised the online infrastructure of Portuguese media company Impresa, defaced Expresso and SIC websites and left the group’s digital news channels and SIC streaming unavailable. Temporary news websites were deployed around 4 January while broadcast television continued. LAPSUS$ publicly claimed the intrusion and issued an extortion demand; the claim does not establish file-encrypting ransomware.
79
Estimated severity
79 / 100
93
Source reliability
93 / 100
Approximate Date
2022-01-02
Targeted Company
IMPRESA
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Portugal
Affected countries
Portugal
Impacted regions
No information
Operational Impact
Duration
2 days
Financial impact (USD M)
No information
Impact types
Service degradationService unavailability
Affected sectors
Media & Entertainment
Affected departments
Information Technology
Attack Profile
Attack types
Data modificationExtortionUnauthorized access
Attributed threat actors
LAPSUS$
Sources
Incident Sources
eco.sapo.pthttps://eco.sapo.pt/2022/01/02/sites-do-expresso-e-da-sic-hackeados/therecord.mediahttps://therecord.media/lapsus-ransomware-gang-hits-sic-portugals-largest-tv-channeljornaldenegocios.pthttps://www.jornaldenegocios.pt/empresas/media/detalhe/sites-na-internet-da-impresa-voltam-em-formato-provisorio-apos-ataque-informaticojpn.up.pthttps://www.jpn.up.pt/2022/01/05/expresso-e-sic-noticias-lancam-sites-provisorios-apos-ataque-informatico/