SAP systems increasingly targeted by cyber attackers

A review of four years of threat intelligence data, presented Friday at Black Hat by Yvan Genuer, a senior security researcher at Onapsis, reports a spike in hacker interest in breaking into enterprise resource planning (ERP) systems from SAP in 2020 that was sustained until the end of 2023.

The vast majority (87%) of the Forbes Global 2000 list of the world’s biggest companies use SAP, according to the enterprise software firm, with the technology handling 77% of the world’s transaction revenue.

ERP-focused cybersecurity firm Onapsis and threat intel research partner Flashpoint analyzed activities on criminal forums, ransomware incidents, chat sites, and ransomware group sites.