
In the stationary stores, there may currently be limited access to some services. The company immediately informed the relevant authorities and is working at full speed to identify the affected systems and repair any damage caused as quickly as possible.

The MediaMarktSaturn Retail Group and its national organizations became the target of a cyberattack. When we reached out to MediaMarkt earlier today about the attack we received the following statement: While it is not clear if unencrypted data has been stolen as part of the attack, Hive ransomware is known to steal files and publish them on their 'HiveLeaks' data leak site if a ransom is not paid. However, in the attack on MediaMarkt, BleepingComputer has been told it was almost automatically reduced to a much lower amount.

Ransomware gangs commonly demand large ransoms at the beginning to allow room for negotiation and usually receive a fraction of the initial demand. #MediaMarkt / #Saturn gerade scheinbar in ganz DE und NL von #Ransomware betroffen.Īlle Kassen still, nichts läuft, sieht nicht gut aus /OR4stCaTT6īleepingComputer has confirmed that the Hive Ransomware operation is behind the attack and initially demanded a huge, but unrealistic, $240 million ransom amount to receive a decryptor for encrypted files. However, BleepingComputer has not been able to corroborate those statements at this time. Screenshots posted on Twitter of alleged internal communications state that 3,100 servers were affected in this attack. Local media reports that internal MediaMarkt communications tell employees to avoid encrypted systems and disconnect cash registers from the network. The systems outage is also preventing returns due to the inability to look up previous purchases. While online sales continue to function as expected, cash registers cannot accept credit cards or print receipts at affected stores.

MediaMarkt suffered a ransomware attack late Sunday evening into Monday morning that encrypted servers and workstations and led to the shutdown of IT systems to prevent the attack's spread.īleepingComputer has learned that the attack affected numerous retail stores throughout Europe, primarily those in the Netherlands. MediaMarkt employs approximately 53,000 employees and has a total sales of €20.8 billion.

MediaMarkt is Europe's largest consumer electronics retailer, with over 1,000 stores in 13 countries. Electronics retail giant MediaMarkt has suffered a Hive ransomware with an initial ransom demand of $240 million, causing IT systems to shut down and store operations to be disrupted in Netherlands and Germany.
