Loading story…
Russian security systems provider Delta said it was hit by a cyberattack that disrupted services used in commercial facilities, private homes, and automobiles. Reports said customers experienced widespread failures in vehicle security functions, including cars that would not start, alarms that could not be turned off, and vehicles that could not be opened, while some users were told recovery might require dealer reflashing. At the same time, Delta’s website was unavailable and its phone lines were reportedly unreachable, compounding the outage.
The incident drew concern because Delta’s products are used for remote protection and access control, raising the prospect of broad operational disruption for customers. Delta confirmed the cyberattack to Russian media, but no actor had been publicly identified, and there was no confirmed evidence of a personal data leak despite customer fears that account or vehicle-related information may have been exposed.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Delta, a Russian company producing security systems for commercial facilities, private homes, and automobiles, confirmed it experienced a cyberattack. Customers reported widespread failures affecting vehicle access and alarm functionality, while Delta's phone lines were unreachable and its website was down; no perpetrator was identified and no data leak was confirmed.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A **cyberattack** disrupted operations at **Delta**, a Russian provider of alarm and security systems for homes, businesses, and vehicles, causing widespread outages and customer complaints. Delta described the incident as a “**large-scale**” and “well-organized” external attack, with company leadership claiming it originated from an unspecified **hostile foreign state**; Delta also said it had **no evidence** at the time that customers’ personal data had been compromised. As services went down, Delta’s **website and phone lines** remained offline into the following day, forcing the company to communicate with customers via **VKontakte** while it worked to restore systems from backups amid concerns about follow-on attacks. The outage had immediate real-world impact, particularly for users of Delta’s vehicle security features: reports described customers being unable to **unlock cars**, **disable alarms**, or use **remote start**, with some accounts alleging doors locking unexpectedly and even **engines shutting down while in motion**. Separate reporting noted Delta’s app (launched in 2020) supports tracking vehicle location and stores **payment data**, increasing customer concern about potential exposure if Delta’s internal systems were breached; however, no threat actor has claimed responsibility and it remains unclear whether the disruption was caused by **DDoS** or a more destructive intrusion such as **ransomware** or a **wiper**.
Jun 29, 2026
A cyberattack on **CDK Global** knocked key dealership management systems offline and disrupted operations at thousands of auto dealerships across the United States. Dealers reported being unable to access core functions for sales, financing, service, and vehicle records, forcing many to switch to manual paperwork and delaying transactions. After suffering two related intrusions, CDK also warned customers that threat actors were attempting **social-engineering** attacks against dealerships during the outage, raising concerns that criminals were exploiting the disruption to gain further access or steal information. The outage quickly translated into major financial damage across the automotive retail sector. Industry estimates cited losses that could approach **$1 billion**, reflecting stalled vehicle sales, service delays, and operational backlogs. Separate reporting later said CDK Global was believed to have paid roughly **$25 million** in ransom to the attackers as the company worked to restore systems and stabilize customer operations, underscoring the scale of the incident and its downstream impact on the dealership ecosystem.
Jul 4, 2026
A cyberattack disrupted operations at **Vladimir Bread Factory**, a major bakery producer in Russia’s Vladimir region, after attackers hit the company’s internal digital environment overnight on Sunday. The incident knocked out office IT, including computers, servers, electronic document management tools, and the widely used **1C** enterprise accounting system, forcing the company to revert to **manual order and shipment processing** and move office staff to a round-the-clock schedule. While production lines and bakeries reportedly continued operating at full capacity, the outage significantly complicated order processing and deliveries, contributing to localized delivery failures and temporary shortages of the company’s bakery products. The attacker identity and incident type (e.g., ransomware vs. other intrusion) were not confirmed, and the company did not provide a timeline for full restoration of affected systems. Reporting also noted this incident in the context of broader cyber-related disruptions in Russia’s food sector, including a prior attack that disabled the country’s animal-based product certification platform (triggering paper-based workarounds and logistics delays) and a separate ransomware incident affecting a large dairy processing plant in southern Siberia in early 2025, which local media speculated may have been linked to the plant’s reported support for Russian troops in Ukraine (without official attribution).
Jun 29, 2026