Ukrzaliznytsia leveraged backups to support operational processes.
The Ukrainian national railway operator had its online systems taken down by a ‘significant’ cyber-attack on Sunday.
According to BleepingComputer, operations of the railway have not been impacted by the "highly systematic and multi-layered" intrusion, according to Ukrzaliznytsia, which noted that trains continued to be on schedule as it leveraged backups to support operational processes.
However the attack on Ukrzaliznytsia forced physical ticket purchases, and led to prolonged waiting times.
"The railway continues to operate despite physical attacks on infrastructure, and even the most devious cyber-attacks cannot stop it. As Ukrzaliznytsia has previously been a target of enemy cyber-attacks, backup protocols have been implemented within the company," said Ukrzaliznytsia.
While Ukrzaliznytsia said that it has already sought the assistance of the country's Computer Emergency Response Team, or CERT-UA, and the SBU Cyber Department in remediating affected systems, the railway operator still has not provided specific details regarding systems recovery
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.
