🔒Elsevier Hit by LAPSUS$ Redirect Attack, Journals Redirected
Elsevier's Journals Redirected by LAPSUS$
TL;DR
Elsevier faced a LAPSUS$ attack, redirecting customers to a criminal calling card. The company quickly resolved the issue, with no core systems or data compromised. LAPSUS$ is known for high-profile attacks, including recent activity in 2025 and 2026.
Elsevier, a major academic publisher, was hit by a LAPSUS$ redirect attack on September 21, redirecting customers to a criminal calling card instead of journal access. The company's cybersecurity team responded immediately, resolving the issue and confirming that no core platforms, customer data, or operational systems were compromised. This attack underscores the ongoing threat from LAPSUS$, which has targeted major companies since 2020, including Rockstar Games and Microsoft. The group's activity dropped to six attacks per month in 2026, but the Elsevier attack highlights the need for vigilance.
Key Points
Elsevier faced a LAPSUS$ attack on September 21, redirecting customers to a criminal calling card.
The company's cybersecurity team responded immediately, resolving the issue on the same day.
No core platforms, customer data, research content, or operational systems were compromised.
LAPSUS$ is known for high-profile attacks since 2020, targeting companies like Rockstar Games and Microsoft.
The group's activity dropped to six attacks per month in 2026, but the Elsevier attack is a reminder of the threat.
Why It Matters
If you're using Elsevier's ScienceDirect or other platforms, this attack highlights the need for robust cybersecurity measures. LAPSUS$'s recent activity shows they remain a threat, despite a drop in attacks in 2026. The quick resolution by Elsevier is reassuring, but vigilance is key.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.