Weak Password Bankrupts UK Company

A 158-year-old UK company went bankrupt, leaving 700 people unemployed, due to a weak password that allowed a ransomware gang to infiltrate its systems.

The transport company KNP, based in Northamptonshire, was the victim of a cyberattack. Hackers from the Akira group gained access to the system by guessing an employee's password, encrypting the data, and locking internal systems.

KNP's director, Paul Abbott, has not revealed to the employee the potential connection between their password and the company's destruction.

In 2023, KNP operated 500 trucks. Despite having cyberattack insurance, the intrusion rendered staff unable to access data essential for business operations. The hackers demanded a ransom, estimated at up to £5 million, which KNP could not pay, leading to data loss and bankruptcy.

The National Cyber Security Centre (NCSC) is trying to identify and prevent cyberattacks, but ransomware remains a growing threat. A government survey estimates that there were 19,000 ransomware attacks on UK-based businesses last year, with the typical ransom demand being around £4 million.

Susan Grimmer, team leader at the NCA, reports that hacking incidents have almost doubled. Hacking is becoming easier, with criminals gaining access to tools and services without specialized skills.

The Joint Committee of Parliament on National Security Strategy warned of a high risk of a catastrophic ransomware attack. The government is considering banning public bodies from paying ransoms and making it mandatory for private companies to report attacks.