Apetito dinner-service under cyber attack

Statement in Dutch on their site:
https://www.apetito.nl/cyber-statement/

I heavily depend on the dinner-service of Apetito in the Netherlands. (I cannot walk so easily anymore)
Every week I order frozen dinners from them for the next week.
And now they are under a cyber attack and I cannot order .....

 

As far as I know the Apetito company is based in Germany.
They deliver dinners in other countries as well.
And they deliver dinners and food for example to nursing-homes etc. etc.

"Why healthcare matters" .....

 

I found a site in Germany about it (in German):
Cyberangriff auf Essensanbieter Apetito - Auch in Thüringen keine Bestellungen möglich - 28. Juni 2022, 16:17 Uhr
https://www.mdr.de/nachrichten/thueringen/apetito-cyberangriff-100.html

That site is telling the same: it is not possible to order now.

=====

May I please, please ask our German members to keep us informed; please; I'm begging you!

 

Statement at the German site:
https://www.apetito.de/

 

FYI:

"Frozen-food firm Apetito hit by cyber attack..."

The Germany-based business’ UK arm described the breach as 'a sophisticated, criminal, cyber attack'..."

https://www.just-food.com/news/frozen-food-firm-apetito-hit-by-cyber-attack/

"Ready meal distributor Apetito restores ‘limited’ deliveries in UK following cyber-attack..."

https://portswigger.net/daily-swig/...mited-deliveries-in-uk-following-cyber-attack

 

Thank you @hawki !
The more info we can get the better.

At the moment I don't know whether sites like Bleepingcomputer or ghacks are posting about it.

 

https://www.golem.de/news/apetito-i...-schulen-und-krankenhaeusern-2206-166497.html
The only new news I found in there is that they think it's properly a ransomware "attack" and that customers should ask there designated field manger/sales representative for more info (when it will work again).

https://borncity.com/win/2022/06/29/cyberangriff-auf-lebensmittelhndler-apetito-in-rheine/
Also mentioning ransomware.

 

Thank you @Freki123

That leads to the WDR site in German:
https://www1.wdr.de/nachrichten/westfalen-lippe/cyberangriff-auf-apetito-100.html

That site is in English:

Thank you again!

In the meanwhile I have informed Lawrence of BleepingComputer by PM here.

 

Do they do business in the USA?

 

Hi,
Yes they do, but I don't know whether in all states of the USA.

Wikipedia : https://en.wikipedia.org/wiki/Apetito

 

Thanks @stapp !

I really do hope that everyone will get their food !!!

=====

Here in NL:
Their website is telling that everyone will get a phonecall.
If you didn't get a phonecall (like me), you can send an email to a special email-address (or use facebook; well, I block facebook).
I have sent them an email. Let's hope that it works and that I will get my food next week.

 

\

IIRC In one of the articles posted above in #5 it was reported that Apetito was unable to call customers because it was unable to access its customer lists.

 

Hi @hawki thanks!

Yes, I thought so too! The info at the NL website was yesterday updated. I have no idea whether that can be trusted, because of ransomware... (if it is indeed ransomware).
It might not have been a good idea that I did sent them an email, sigh.
I still cannot reach them on the phone; same automatic answer ...
Sigh

 

I can't find their USA website. I can find their UK & Germany sites though.

 

Hi @zapjb

Try to search for http://www.coppercountyfoods.ca/

Quotes from https://www.betheboss.ca/franchises/copper-county-foods/

PS: we are not an advertising board but in this case, looking at the worldwide cyber-attack, I thought I could give that info.

 

Thanks @stapp !

Fully 100% agreed !!!

 

Statement from the Chair & CEO, apetito UK & North America:
pdf
https://www.apetito.co.uk/media/wysiwyg/apetito-uk/docs/4.0_apetito_Cyber_Attack_Communication.pdf

 

I had contact by email and phone with Apetito in the Netherlands.
Not the usual email-address but the special one as mentioned at the Dutch site, and also not the usual phone-number. They called me this morning. I recognised the voice and the name of the lady; very kind lady.
I could make my order and will get the food next week at the usual day.
I'm very happy and I hope that it works for others too!!

 

Article in Dutch at security.nl :
https://www.security.nl/posting/759...tito ernstig belemmerd door ransomware-aanval

 

That statement has been updated :
pdf
https://www.apetito.co.uk/media/wysiwyg/apetito-uk/docs/5.1_apetito_Cyber_Attack_Communication.pdf

==========

In a previous post I wrote that I would get my food this week.
That should have been today.
Well, nothing ...... ggrrrr .....

 

The above statement (pdf) at the apetito.co.uk site has not been updated yet. Last update is from 1 July 2022.

How the situation is with recovery there, I don't know.

===

In NL the latest info (in Dutch) is from 5 July 2022
https://www.apetito.nl/cyber-statement/
They say there that it is possible to order a limited range of frozen dinners.
But does that actually work? As they say in Dutch "eerst zien, dan geloven".
As I wrote above, they told me per email that I would get it last week, and that didn't happen.
They have a limited emergency phone number. I tried it last week: 57 callers before you (well, then you hang up the phone).
Surprise: they called me last week. I could order for this week; but no garantee ... And they hardly know what they get from Germany ...
I can only wait and see ...

===

I don't know what the situation is in Germany: I have problems with their website. Maybe someone else could tell?
For other countries I have zero info.

 

The german apetito.de website consists more or less of one statement and the "we hire" section.

Spoiler: Statement

Nach dem Cyberangriff Ende Juni arbeitet ein Expertenteam weiter mit Hochdruck daran, die wichtigsten Systeme nach und nach wieder zum Laufen zu bringen. Leider haben wir z.T. weiterhin nur eingeschränkten Zugriff auf unsere IT-gestützten Systeme. Dazu zählen auch unsere Telefonanlage sowie E-Mail-Programme. Der Fokus lag darauf, die für unsere Küchen und die Logistik zuständigen Systeme wieder ans Laufen zu bringen. Das ist uns in Teilen gelungen. Ebenso haben wir alternative Bestellwege für unsere Kunden aufgesetzt. Bewerber können sich nun wieder über unsere Jobbörse bewerben.
Wir wünschen uns sehr, Ihnen alsbald den gewohnten Service wieder zur Verfügung stellen zu können.
Höchste Priorität hat für uns weiterhin die Versorgungssicherheit und Belieferung unserer Kunden, wenn wir auch noch nicht überall Produkte aus allen Sortimenten liefern können. Liebe Kundinnen und Kunden, wir bemühen uns, Ihre gewünschten Menüs auszuliefern – müssen aber zum Teil weiterhin auf Alternativmenüs setzen.
Für die Unannehmlichkeiten bitten wir um Verständnis.

They are still working on it. They prioritized the kitchens and transport. They have alternative ordering ways/channels for customers (not mentioning which). They try to deliver the food you ordered but it could be that you get an alternative meal instead.

 

Thanks @Freki123 !
Not much more info from the German site, as far as I can tell from your post.
It looks like the UK and NL sites had at least a bit more info.
Please keep us informed! Thank you!

In my humble opinion the other security websites could and should post more about it.
Why they don't, I don't know. Their decision ... Maybe they don't care about the vulnerable people who depend on these kind of food. It is their decision to post about it. If they don't, it tells something about them.

In the meanwhile it was the responsibility of Apetito to secure their systems, sites, servers, and procedures. They failed big part. They are responsible and no one else.