Case Study: a major European utility provider stops insider fraud with Palo Alto Networks Unit 42

a major European utility provider restores operations in 3 days with Palo Alto Networks

A major European utility provider faced a significant insider threat when a disgruntled employee used legitimate access to manipulate payment records and exfiltrate funds over a two-year period. The customer engaged Palo Alto Networks and its Unit 42 Incident Response team to uncover the source of the breach, identify any data exfiltration, contain the threat, and provide indicators of compromise.

Palo Alto Networks utilized its Cortex XDR platform to quickly map the complete attack chain and identify compromised assets. Unit 42 neutralized the threat by removing unauthorized agents from over 70 workstations, resetting credentials, and clearing backdoors. The vendor fully restored the client's operations within 72 hours and provided hardening recommendations, which led to the replacement of legacy tools with the Cortex XSIAM platform for improved threat visibility.