Skip to content
ATB
Ukraine2 sources
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 1 Nov 2026.
Ukrainian grocery chain ATB confirms cyberattack after extortion demand posted online
Ukrainian grocery chain ATB confirmed it suffered a cyberattack after hackers posted an extortion demand threatening to leak data. No confirmed record count was provided in the disclosure.
- Type
- Ransomware
- Sector
- Retail
- First reported
- 1 Nov 2026
- Latest source
- 1 Nov 2026
What to do
- Expect delays if you rely on this organisation's services, and keep records of anything you are owed.
- If you have an account, change that password, and anywhere you reused it.
- Ransomware gangs often leak stolen files. Be wary of anyone contacting you about this organisation.
- If you connect to this organisation (VPN, file transfer, email), review and restrict those links until they confirm containment.
- Check that your own backups are offline or immutable and that you have tested a restore recently.
- Patch internet-facing VPNs, firewalls and remote access first: they are the usual way in.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for ATB
Sources
2- therecord.media1 Nov 2026therecord.media/atb-ukraine-cyberattack-ransomware
- getleaktrace.com1 Nov 2026getleaktrace.com/breaches/2026
Confidence 65% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.