Hawa Sliding Solutions
bd_66e0c9701046d44e · schema v1 · pii pii-v1
Full breach record for Hawa Sliding Solutions →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage and machine-translated to English — verify against the source.
Summary
machine-translatedHawa Sliding Solutions AG: Cyber-Attack Leads to Restrictions - MÖBELMARKT. Hawa Sliding Solutions AG: The Swiss manufacturer of sliding door hardware, Hawa Sliding Solutions AG, was the victim of a cyberattack in late April 2023. The company immediately responded by informing its customers and suppliers, shutting down all its systems, and asking most of its employees to work from home. An internal team and specialists are currently working on the full restoration of operational processes. Orders can currently only be processed manually, and IT systems are being rebuilt. Hawa's websites remain online, and customer service is available by phone, email, and video conferencing. Linked ransomware group: cactus.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Apr 29, 2023
Press report
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitecactusbd_2ef36e223f0578cb2023-07-20 · +82dCandidate
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
cactus
According to ransomware.live, The CACTUS ransomware is said to have emerged around March 2023. The group became known for exploiting vulnerabilities to gain initial access and maintain a presence within the organization's infrastructure. There is little known information about the ransomware group, except that it emerged on the mentioned date and, following encryption, a text file named 'cAcTuS.readme.txt' would be created. Additionally, encrypted files were altered to the '.cts1' extension, and data exfiltration and victim extortion were conducted through the use of the service known as Tox. Source: https://github.com/crocodyli/ThreatActors-TTPs