Cyber attack at MediaMarkt: hackers demand 50 million dollars
(update) Since Monday, MediaMarkt has been the victim of a cyber attack: an international group of hackers hacked the electronics chain’s computer systems. The cybercriminals are demanding 50 million dollars (around 43 million euros) in bitcoin.
All data encrypted
On Monday morning, international MediaMarkt shop assistants were told that the in-store computers were out of order and were asked to disconnect the cash registers from the internet. It soon became apparent that a cyberattack had targeted the electronics retailer. Although the company did not want to release any further information at the time, it is now known that the attack was a digital hostage-taking.
Reportedly, on every hacked computer, there is a file containing the message: “Your network has been hacked, and all data has been encrypted. To regain access to all data, you must purchase our decryption software”, reported Dutch news channel RTL.
International hacker group
This so-called decryption software costs a tremendous amount: the hostage-takers demand 50 million dollars (about 43 million euros), paid in bitcoin. Initially, the ransom demand was even 240 million dollars, according to the BleepingComputer, but that amount dropped almost automatically when MediaMarkt began negotiating.
Behind the attack is the internationally infamous hacker group Hive, which previously hacked hospitals’ computer systems, among other things. It all proceeds quite professionally because Hive even has a sort of ‘customer service’: victims can chat with the hackers to negotiate the ransom and get a few hostage files back as proof. Those who fail to pay in time will find that their information will be up for grabs on the group’s website. By leaking this data, they put pressure on the victims.
Stores are open
A total of 3100 MediaMarkt servers are said to have been hacked. It is not known whether the hackers also have access to the consumer data of the electronics retailer. However, Hive is said to be very thorough and usually even hacks the backups of its targets. Negotiations are currently ongoing regarding the ransom.
The MediaMarkt stores, also in Belgium and the Netherlands, are currently open, but only physical articles from the stores can be sold. Consumers cannot pick up or return packages, save loyalty points on their loyalty cards, or redeem gift vouchers. The cash registers in the affected stores cannot accept credit cards or print receipts. E-commerce continues as usual.