Skip to content

Incidents involving:

Impresa (Expresso / SIC)

RansomwareResolved

Impresa media group ransomware attack

The Lapsus$ group seized the Amazon Web Services account of Impresa, Portugal's largest media conglomerate, knocking the Expresso newspaper and SIC television channels offline, defacing their websites and hijacking Expresso's verified Twitter account in what authorities called the country's largest ransomware attack.

Victim
Impresa (Expresso / SIC)