Case Study: SIG Plc achieves rapid ransomware containment and mass endpoint recovery with CrowdStrike

European Construction Supplier Repels Ransomware, Rebuilds Security Defenses

SIG, a leading European building-solutions supplier with 6,500 employees across 425 locations, was hit in France by a GandCrab ransomware attack that compromised more than 600 systems just as it was beginning a security refresh. The company had been managing a mix of antivirus tools with a lean IT organization, and only two devices had CrowdStrike installed when the attack began—those two devices were key to detecting the incident.

SIG deployed CrowdStrike Falcon Complete managed detection and response and engaged CrowdStrike services to triage the incident, rebuild critical infrastructure and accelerate rollout. CrowdStrike helped secure 450 of the vulnerable devices within 30 minutes, enabled recovery of operations, and prompted full protection across 9,500 endpoints along with compromise assessment and incident-response capabilities to harden SIG’s security posture.

SIG Plc

Carl Baron

Chief Information Security Officer