United States
USA
On 24 February 2022, an attacker exploited a misconfigured VPN to enter management systems supporting Viasat’s KA-SAT broadband service and issued destructive commands to subscriber modems, following a traffic-flooding phase. Thousands of customers in Ukraine and tens of thousands elsewhere in Europe lost satellite internet connectivity. Approximately 5,800 German Enercon wind turbines lost remote monitoring and control, although electricity generation continued. Viasat explicitly found no compromise of its software-update supply chain.
Estimated severity
92 / 100
Source reliability
94 / 100
Approximate Date
2022-02-24
Targeted Company
VIASAT
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
United States
USA
Germany
DEU
Ukraine
UKR
Target country
United States
Affected countries
Impacted regions
No information
Duration
No information
Financial impact (USD M)
No information
Impact types
Affected sectors
Affected departments
Attack types
Attributed threat actors
No information
Incident Sources
Please rotate your phone