How a Single Weak Password Sank a 158‑Year‑Old UK Logistics Firm

Incident Overview

In June 2023, the UK logistics company Knights of Old (KNP), operating for 158 years with a fleet of over 500 trucks, was compromised by the Akira ransomware group, an offshoot of the former Conti gang.

Attack Vector

Akira gained initial access by brute‑forcing a weak employee password (e.g., 12345678, welcome1, password123) or by using leaked credentials. The compromised account provided unrestricted access to KNP’s internal network.

Ransomware Deployment

After infiltration, the attackers deployed ransomware that encrypted critical data, including customer records, vehicle dispatch schedules, delivery plans, and accounting systems. Within hours the entire internal environment was rendered inoperable.

Ransom Demand and Impact

The ransom was estimated at up to £500 000 (≈ ¥4.8 million). KNP could not pay, and the encrypted data could not be recovered. All servers, backups, and disaster‑recovery systems were destroyed, leading to the company’s bankruptcy and the loss of more than 700 jobs.

Threat Actor Tactics

Akira employed a “double extortion” model: data were exfiltrated before encryption, and the threat of public release was used to pressure payment. Since early 2023 the group has attacked over 250 organizations worldwide, extracting more than $4.2 million in ransom.

Broader Context

Similar ransomware incidents have affected other UK firms such as M&S, Co‑op, and Harrods. The National Crime Agency reports weekly cyber incidents rising from about 20 in 2022 to 35–40 in 2023.

Mitigation Recommendations

Enable multi‑factor authentication (MFA) for all privileged and remote accounts.

Enforce strong, unique passwords and prohibit password reuse.

Implement least‑privilege access controls and regularly audit account permissions.

Deploy continuous security awareness training for all staff.

Maintain up‑to‑date backups isolated from the production network and test restoration procedures.

“If you are reading this, it means your internal systems are partially or fully crippled… don’t rush to cry, start a constructive dialogue.”