One of the factories that produces components for Russian armored vehicles has suffered a large-scale cyber attack. We are talking about the Izhevsk plant "Donvard - Hydraulic systems".
This was reported to RBC-Ukraine by sources close to Ukrainian intelligence.
The work of the plant is complicated
According to the interlocutor, the production itself has not been completely stopped, but the work of the plant is maximally complicated. He specified that as a result of the attack, 50 terabytes of network attached storage (NAS) was destroyed, as well as the lion's share of project documentation and drawings of research and development works for the period from 2007 to the present time.
The client database is destroyed
"The client database was destroyed. The domain network (computers and server equipment) on more than 200 devices was encrypted. All existing copies of the data were deleted. The normal functioning of the 1C programs, SUP (recruitment management system), PML (production life cycle management system) was disrupted. , PDM (organizational and technical system for managing all information about products)," the source added.
Restoring information will take more than a month
In addition, the so-called "defacement" of the company's official website was carried out - removing web pages and replacing them with others. Currently, the "Donvard" site is closed by the provider without any explanation. According to the publication, network administrators have notified employees about the attack, but cannot name the exact time frame for restoration.
"It is expected that the software will work locally within three days. It will take more than a month for at least partial restoration of information. However, a lot of data has been permanently lost. Currently, employees of Donvard are feverishly remembering how they worked in the pre-computer era," said an informed interlocutor RBC-Ukraine.
Who is behind the attack?
Officially, responsibility for the attack was taken by the hacker group "TWELVE", which in April of this year "put down" the servers of the Federal Customs Service of the Russian Federation.
However, according to the publication, actions of similar scale usually take place in cooperation with Ukrainian special services. According to the sources of RBC-Ukraine, the cyber forces of the GUR of the Ministry of Defense of Ukraine are behind the attack on "Donvard".