Metro Brands reports cybersecurity incident within its IT infrastructure

Metro Brands has identified a cybersecurity incident involving unauthorised activity within its IT infrastructure, including its Active Directory environment.

The incident was identified through security monitoring. Subsequent investigations indicated unauthorised privileged activity, suspected credential-access attempts and malicious communications involving multiple systems.

The Company promptly initiated containment and remediation measures in coordination with its cybersecurity partners. Specialised cybersecurity investigators are being engaged to assess the nature and extent of the incident, establish its root cause and recommend further corrective and preventive measures.

Based on the preliminary assessment, no material financial loss has been identified to date. The full extent of the incident, including any potential data exposure and operational or financial impact, remains under investigation.