January 2023
February 2023
8
9
10
1
2
3
4
5
6
7
Royal Mail experiences a major cyber incident that renders it unable to provide international mail services. It immediately consults external security specialists.
1
2
The company publicly announces a “severe service disruption”.
3
A ransom demand is discovered, which points to the Russian-linked cartel behind LockBit. This is the first publicly available evidence of a cyber attack.
4
LockBitSupport – the public voice of the LockBit cartel – denies responsibility for the attack.
Royal Mail’s CEO, Simon Thompson, confirms that the disruption has resulted from a cyber attack. He tells a parliamentary select committee that he believes no customer data has been compromised.
5
The mail carrier resumes some overseas services. Parcels that were processed before the attack start moving in “limited volumes”.
6
7
More international services become available, but small businesses in particular are still facing crippling delays.
8
After weeks of work behind the scenes, most international services are restored.
9
On a Russian hacking forum, LockBitSupport finally accepts responsibility for the attack and threatens to publish compromised Royal Mail data on 9 February unless its ransom demands are met.
The foreign secretary, James Cleverly, announces government sanctions against seven Russians linked to the Conti hacker group. In effect, the measure bans ransom payments to that group.
10
January 2023
February 2023
8
9
10
1
2
3
4
5
6
7
Royal Mail experiences a major cyber incident that renders it unable to provide international mail services. It immediately consults external security specialists.
1
2
The company publicly announces a “severe service disruption”.
3
A ransom demand is discovered, which points to the Russian-linked cartel behind LockBit. This is the first publicly available evidence of a cyber attack.
4
LockBitSupport – the public voice of the LockBit cartel – denies responsibility for the attack.
5
Royal Mail’s CEO, Simon Thompson, confirms that the disruption has resulted from a cyber attack. He tells a parliamentary select committee that he believes no customer data has been compromised.
6
The mail carrier resumes some overseas services. Parcels that were processed before the attack start moving in “limited volumes”.
7
More international services become available, but small businesses in particular are still facing crippling delays.
8
After weeks of work behind the scenes, most international services are restored.
9
On a Russian hacking forum, LockBitSupport finally accepts responsibility for the attack and threatens to publish compromised Royal Mail data on 9 February unless its ransom demands are met.
10
The foreign secretary, James Cleverly, announces government sanctions against seven Russians linked to the Conti hacker group. In effect, the measure bans ransom payments to that group.
January 2023
February 2023
8
9
10
1
2
3
4
5
6
7
Royal Mail experiences a major cyber incident that renders it unable to provide international mail services. It immediately consults external security specialists.
1
2
The company publicly announces a “severe service disruption”.
3
A ransom demand is discovered, which points to the Russian-linked cartel behind LockBit. This is the first publicly available evidence of a cyber attack.
4
LockBitSupport – the public voice of the LockBit cartel – denies responsibility for the attack.
5
Royal Mail’s CEO, Simon Thompson, confirms that the disruption has resulted from a cyber attack. He tells a parliamentary select committee that he believes no customer data has been compromised.
6
The mail carrier resumes some overseas services. Parcels that were processed before the attack start moving in “limited volumes”.
7
More international services become available, but small businesses in particular are still facing crippling delays.
8
After weeks of work behind the scenes, most international services are restored.
9
On a Russian hacking forum, LockBitSupport finally accepts responsibility for the attack and threatens to publish compromised Royal Mail data on 9 February unless its ransom demands are met.
10
The foreign secretary, James Cleverly, announces government sanctions against seven Russians linked to the Conti hacker group. In effect, the measure bans ransom payments to that group.
Royal Mail experiences a major cyber incident that renders it unable to provide international mail services. It immediately consults external security specialists.
1
January 2023
2
The company publicly announces a “severe service disruption”.
3
A ransom demand is discovered, which points to the Russian-linked cartel behind LockBit. This is the first publicly available evidence of a cyber attack.
1
2
3
4
4
LockBitSupport – the public voice of the LockBit cartel – denies responsibility for the attack.
5
6
7
5
Royal Mail’s CEO, Simon Thompson, confirms that the disruption has resulted from a cyber attack. He tells a parliamentary select committee that he believes no customer data has been compromised.
6
The mail carrier resumes some overseas services. Parcels that were processed before the attack start moving in “limited volumes”.
February 2023
7
More international services become available, but small businesses in particular are still facing crippling delays.
8
9
10
8
After weeks of work behind the scenes, most international services are restored.
9
On a Russian hacking forum, LockBitSupport finally accepts responsibility for the attack and threatens to publish compromised Royal Mail data on 9 February unless its ransom demands are met.
10
The foreign secretary, James Cleverly, announces government sanctions against seven Russians linked to the Conti hacker group. In effect, the measure bans ransom payments to that group.
Various news sources and computer forums, 2023