Ransomware (extortion): Transport and logistics, United Kingdom 2023
In June 2023, the Akira group encrypted the transport company’s systems; without access to data, the business could no longer be run.
- Incident · 06.2023 · Northamptonshire, United Kingdom
- Evidence: several media
- Ransomware (extortion)
As of
What happened
A negotiation firm estimated the demand at up to 5 million pounds, which KNP could not raise. In September 2023, the company went into administration; around 730 jobs were lost, and around 170 were saved through a partial sale.
- Affected
- KNP Logistics Group (including Knights of Old)
- Industry
- Transport and logistics
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- yes / no
- Data affected
- true
- Bankruptcy
- yes
- Entry point
- According to the BBC, probably a guessed password of an employee (not officially confirmed)
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: yes, according to the source.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Even with insurance and standard protection, a single weak password without two-factor protection can destroy a company.
Sources
- UK logistics firm KNP enters administration after ransomware attack (opens in a new window) The Record · 2023-09-26
«We will support all affected staff through this difficult time.»
- 158-year-old company forced to close after ransomware attack precipitated by a single guessed password (opens in a new window) Tom's Hardware (nach BBC Panorama) · 2025-07