Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Ransomware

Ingram Micro Restores Systems Impacted by Ransomware

Ingram Micro has restored operations across all countries and regions after disconnecting systems to contain a ransomware attack.

Ingram Micro Cyberattack

IT giant Ingram Micro says it has restored all services that were disrupted by a ransomware attack over the weekend.

The outages started on Friday afternoon, with numerous customers complaining of being unable to place orders or access the company’s management portals.

Over the weekend, the tech giant confirmed that it had disconnected internal systems to contain a ransomware attack, and said it was implementing mitigation and recovery measures.

Following a series of updates describing its progress in bringing the affected systems and services back online, the company announced Tuesday that the incident was contained and remediated.

Starting Monday, the IT giant had been slowly restoring various systems across different countries and regions, and on Wednesday it announced that all operations have been restored.

“Ingram Micro is pleased to report that we are now operational across all countries and regions where we transact business,” the company said.

Advertisement. Scroll to continue reading.

“Our teams are now able to process and ship orders received via EDI, or electronically, as well as by phone or email across all of our business regions,” it added.

“Our teams continue to perform at a swift pace to serve and support our customers and vendor partners. We are grateful for the support we’ve received from our customers and industry colleagues,” the company said.

Ingram Micro has not shared details on whether any data was exfiltrated from its systems, but said it was still looking into the scope of the incident and into potentially compromised data.

The SafePlay ransomware group, which is allegedly responsible for the attack, has kept mum on the incident and it is unclear whether any data was indeed stolen and if the hackers attempted to extort Ingram Micro.

Contacted by SecurityWeek, an Ingram Micro spokesperson refrained from providing information on the attackers.

Related: Chain IQ, UBS Data Stolen in Ransomware Attack

Related: Krispy Kreme Confirms Data Breach After Ransomware Attack

Related: Fog Ransomware Attack Employs Unusual Tools

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

Explore how attackers are using AI to scale threats and how security teams can respond with AI-driven defenses. Protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI governance frameworks.

Register

People on the Move

Rapid7 announced that Wael Mohamed will assume the role of Chief Executive Officer, replacing current Chief Executive Officer Corey Thomas, who will become Executive Chairman of the Board.

Anurag Jain has been appointed Senior Vice President of Engineering at CodeHunter.

CTERA has appointed Tal Sarfaty as Senior Vice President of Cybersecurity.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.