Ransomware Attack Halts Sierra Wireless IoT Operations; Maritime Industry Faces 1.5 Million Attacks in 30 Days

Last week began with a series of practical cybersecurity recommendations. By Wednesday, those guidelines turned into a harsh reality when Sierra Wireless, a leading IoT supplier based in Vancouver, fell victim to a full‑blown ransomware attack.

Cybersecurity experts like Jeremy Cowan routinely share best practices for enterprises in IoT and beyond, yet seeing a well‑prepared vendor disrupted is still alarming.

On March 20, Sierra Wireless discovered that its internal IT infrastructure had been compromised. The company issued a public statement on March 23, noting that its IT and operations teams, together with third‑party advisors, had immediately activated incident‑response protocols.

According to the statement, the teams “believe the attack has been addressed” and are working to restore the company’s internal IT systems, including its website.

Consequently, production at Sierra Wireless’ manufacturing facilities was halted, and both the corporate website and internal operations suffered significant disruption.

Clear separation between internal and customer‑facing systems

By March 26, the company confirmed that the attack was contained, production had resumed, and internal IT systems were being restored. It emphasized that its internal network and corporate website were the only systems impacted, as customer‑facing products and services remain isolated.

Sam Cochrane, Sierra Wireless’ CFO and head of IT operations, said: “Security is a top priority, and we are committed to maintaining the highest integrity across all systems. I’m proud of our IT team and external advisors for mitigating the attack and getting operations back online. We will keep affected customers and partners informed as the investigation continues.”

At the time of writing, Sierra Wireless’ website displays a ransomware announcement and links to earlier BusinessWire reports; no other pages are accessible.

Matt Hatton, co‑founder of Transforma Insights, noted that the incident “reinforces the value of keeping IT and OT networks separate.”

Practical protections in a crowded threat landscape

Ryan Weeks, CISO at Datto, highlighted the recent Acer breach, stating that “any business—large or small—can fall victim to cyberattacks. The complexity of these threats often exceeds an organization’s in‑house capabilities, underscoring the need for MSPs and MSSPs to provide true cyber resilience.”

Weeks elaborated that cyber resilience merges cybersecurity, business continuity, and incident response, requiring five core capabilities: identify, protect, detect, respond, and recover. These capabilities must be built from the ground up with people, processes, and technology, rather than bought outright.

Maritime sector under siege

Subex and SkyLab have joined forces to deliver IoT and OT cybersecurity solutions to the shipping industry. Their partnership aims to safeguard ships, offshore and onshore maritime assets, communication channels, and infrastructure.

Subex’s research shows that shipping companies worldwide experienced almost 1.5 million cyberattacks in the past 30 days, with more than 64,000 classified as “highly sophisticated” and employing complex malware, social engineering, deception, and traffic manipulation to breach core and peripheral systems.

Organizations that previously believed they were immune to such threats should now re‑evaluate their security, backup, and business continuity strategies.

Author: Jeremy Cowan, Editorial Director, IoT Now.