Companies should disconnect operational technology from the internet and enforce strong protections for user accounts, a joint alert from CISA, the FBI, NSA and DoD said.
The incident, one of the largest breaches reported to federal regulators this year, came after a cybercriminal accessed data on the company’s computer systems over the winter.
The intruders who gained access to the grocer’s online systems in November had access to information including birthdays, Social Security numbers and bank account details.
Learn how threat actors chain identities to escalate system access — and discover proven tactics to block these attack routes before they’re exploited in this webinar.
