Komaihaltec: ransomware after an unauthorized remote desktop logon

Komaihaltec, which builds bridges and steel structures, disclosed on 25 and 26 June 2024 that some business servers had been accessed without authorization and their files encrypted. It confirmed the damage on 24 June. Its findings of 31 July said there was an unauthorized remote desktop logon to one server at about 22:00 on 22 June, and ransomware was run on four servers from it at about 17:00 on 23 June. Traces of some data being taken were found, including employee data. Production and sales resumed on a safe network and PCs.