Ransomware (extortion): Restaurant and catering, USA 2023
From mid-April 2023, a ransomware attack on an NCR data centre paralysed additional applications of the Aloha restaurant till system.
- Incident · 04.2023 · USA
- Evidence: confirmed by an authority
- Ransomware (extortion)
- Attack via a supplier
As of
What happened
Restaurants reported outages of online orders, payroll, gift cards and reporting; data had to be uploaded again. The BlackCat/ALPHV group claimed the attack; according to NCR, payment applications were not affected.
- Affected
- Restaurants with the NCR Aloha till system (provider NCR)
- Industry
- Restaurant and catering
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Ransomware attack on a data centre of the till system provider NCR
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income if the cloud or a provider is attacked
Mostly limited 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Even the restaurant round the corner depends on its till provider’s data centre; a manual emergency operation belongs in the plan.
Sources
- NCR suffers Aloha POS outage after BlackCat ransomware attack (opens in a new window) BleepingComputer · 2023-04
- NCR's Aloha POS hit by cyberattack, causing headaches for restaurants (opens in a new window) Restaurant Business · 2023-04