French IT services giant Sopra Steria suffered a cyberattack on October 20th, 2020, that reportedly encrypted portions of their network with the Ryuk ransomware. The company issued a statement on October 21st, but provided few details about the attack. A source familiar with the attack has told BleepingComputer the network was encrypted by the same group that infected the Universal Health Services. The group is known for its TrickBot and Bazar loader infections that allow threat actors to access a compromised network and deploy Ryuk or Conti ransomware infections.
Source: https://www.bleepingcomputer.com/news/security/french-it-giant-sopra-steria-hit-by-ryuk-ransomware/