Ganong Bros. reports cybersecurity incident, operations disrupted

Ganong Bros., the Canadian confectionery manufacturer based in St. Stephen reports an "IT security incident" that temporarily disrupted its operations..

Ganong has started  containment and remediation efforts, retained third-party cybersecurity experts and engaged external legal counsel. Conducting a forensic investigation to determine the extent of the incident.

According to cybersecurity website RedPacket Security, evidence of the attack was found on a site on the dark web, including a screenshot allegedly showing internal communications and data stolen from Ganong. The information was posted on a site connected to a group known as PLAY, a hacker collective believed to be based in Russia. RedPacket Security has identified the incident as a ransomware attack,

No details are disclosed about any data exposed or impacted individuals. The company stated that if their investigation determines personal information was impacted, they will notify affected individuals directly in accordance with privacy laws. Ganong did not confirm whether a ransom had been demanded or paid.