Compal[1], a Taiwanese electronics company that builds laptops for some of the world's largest computer brands, suffered a ransomware attack over the weekend.
Responsible for the breach is believed to be the DoppelPaymer ransomware gang, according to a screenshot of the ransom note shared by Compal employees with Yahoo Taiwan reporters.
According to Taiwanese media[1, 2, 3, 4], the incident was discovered on Sunday morning and is believed to have impacted around 30% of Compal's computer fleet.
Employees arriving at work were greeted by a memo from Compal's IT staff, asking workers to check the status of their workstations and back up important files on systems that were not impacted.
Since Sunday, Compal's IT staff has been reinstalling encrypted workstations.
Compal exec denies ransomware attack, admits hack
Despite reports in local media, in a statement provided to United News Network reporters[2] on Monday, Compal Deputy Manager Director Qingxiong Lu admitted that the company suffered a security breach but denied that the company's recent downtime was caused by ransomware.
"[Compal] is not being blackmailed by hackers as it is rumored by the outside world," the Compal exec told reporters.
Furthermore, Qingxiong said the incident only impacted the company's internal office network and that Compal production lines, which build laptops for other companies, have not been impacted.
Qingxiong estimated the company would be back to normal later today, on Monday, when staff is expected to finish restoring all the systems that have been impacted by what he described as "abnormalities."
Compal is today's second-largest