British engineering firm Smiths Group faced a security breach

January 30, 2025
Smiths Group London Engineering Firm Cyberattack Security Breach

One of London’s leading engineering firms, Smiths Group, disclosed a security breach on its networks after unknown threat actors breached its systems.

The affected entity is a British multinational listed on the London Stock Exchange. The company is currently home to more than 15,000 employees in numerous branches that cover at least 50 countries.

In addition, the firm’s primary operation is selling equipment to customers in various industries, including the energy, safety, security, aerospace, and defence sectors. The attackers could have seen potential in targeting the firm, which reportedly generated £3,132 million in revenue last year.

 

The Smiths Group intrusion stemmed from unauthorised access.

 

According to reports, the Smiths Group engineering firm revealed that it is investigating a cybersecurity issue involving unauthorised access to its systems.

Reports also claimed that the company immediately isolated the attack as soon as becoming aware of it. The firm stated that it immediately separated the compromised systems and deployed its business continuity measures to mitigate the attack’s impact.

Smiths is currently collaborating with a third-party security provider that could reportedly aid them in recovering the damaged systems.

They also employed security specialists to allegedly recover damaged systems and assess the broader impact on the business. Furthermore, the company assured the public that it is taking all required steps to comply with all relevant regulatory standards and will offer an update when more information becomes available.

However, the engineering company has yet to disclose when the breach was discovered or whether corporate or customer data was stolen during the incident. It is also reluctant to answer further inquiries about the hack.

These cybercriminal incidents with unknown operators have been widespread recently. Some of the huge companies that suffered from such recent attacks include the American business services provider and federal contractor Conduent and Hewlett Packard Enterprise (HPE).

Cybercriminals have been executing these malicious campaigns through various intrusion techniques, such as exploiting zero-days and phishing attacks. Therefore, companies should regularly check their systems for flaws and train their employees to spot malicious emails to avoid becoming the next victim of these increasing cyber intrusions.

About the author