Sector: Construction and Transport
Type: Ransomware
A ransomware attack on a shared server at the insured,
a SME in construction and transport, encrypted all the
shared files. Staff at the insured were unable to access
files or emails which meant the company was effectively
unable to trade. The insured’s own IT support was able
to restore the encrypted files using the latest daily
back-ups but, they were unable to prevent further attacks
being attempted.
Our Response
An IT forensics team was appointed to review the situation
and prevent further attacks. They quickly identified
the issues and made recommendations to secure the
system and prevent further attacks. Our internal forensic
accountants assisted in determining the insured’s Business
Interruption loss.
