Bayer confirms cyber attack but says no data stolen

Bayer confirmed "a significative hacking attempt" had taken place but said no data leaks had been found
Bayer confirmed "a significative hacking attempt" had taken place but said no data leaks had been found

German chemicals giant Bayer confirmed Thursday reports it had suffered a hacking attack, but insisted that so far no data appeared to have been stolen.

The Leverkusen-based group "detected indications of () Winnti infections at the beginning of 2018," a spokesman told AFP, confirming reports by German BR and NDR.

"There is no evidence of data outflow," he added.

Hackers from the so-called Winnti group, believed to be linked to the Chinese state, were first spotted using malicious software to spy on Bayer's activities in early 2018 and were present in company networks until late last month, the said.

Bayer said that "in close collaboration with" private cyber security organisation DCSO and police in North Rhine-Westphalia state it had "identified, analysed and cleaned up the affected systems."

The two public broadcasters reported that state police had declined to comment on the investigation for "tactical reasons".

For its part, Bayer said that Cologne state prosecutors were looking into the case.

Gerhard Schindler, former head of Germany's BND foreign intelligence service, told BR that while it was extremely difficult to attribute hacking attacks to any state, spying on German firms was "in line with China's ambitious economic goals".

Andreas Rohr of the DCSO—set up by German companies as a joint cyber defence centre—said that given the targets so far chosen by Winnti, "we can assume that there is a very targeted tasking by the Chinese state," although definite proof was impossible.

Winnti attacks have been discovered at three smaller German firms since the beginning of 2019, BR and NDR reported.

And in 2016, the group's software was discovered in systems at industrial conglomerate Thyssenkrupp.


Explore further

Bayer victim of a cyber-attack: German media

© 2019 AFP

Citation: Bayer confirms cyber attack but says no data stolen (2019, April 4) retrieved 20 August 2019 from https://phys.org/news/2019-04-bayer-cyber-stolen.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.
18 shares

Feedback to editors

User comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more