Ransomware

Ingram Micro Restores Systems Impacted by Ransomware

Ingram Micro has restored operations across all countries and regions after disconnecting systems to contain a ransomware attack.

Ingram Micro Cyberattack

IT giant Ingram Micro says it has restored all services that were disrupted by a ransomware attack over the weekend.

The outages started on Friday afternoon, with numerous customers complaining of being unable to place orders or access the company’s management portals.

Over the weekend, the tech giant confirmed that it had disconnected internal systems to contain a ransomware attack, and said it was implementing mitigation and recovery measures.

Following a series of updates describing its progress in bringing the affected systems and services back online, the company announced Tuesday that the incident was contained and remediated.

Starting Monday, the IT giant had been slowly restoring various systems across different countries and regions, and on Wednesday it announced that all operations have been restored.

“Ingram Micro is pleased to report that we are now operational across all countries and regions where we transact business,” the company said.

Advertisement. Scroll to continue reading.

“Our teams are now able to process and ship orders received via EDI, or electronically, as well as by phone or email across all of our business regions,” it added.

“Our teams continue to perform at a swift pace to serve and support our customers and vendor partners. We are grateful for the support we’ve received from our customers and industry colleagues,” the company said.

Ingram Micro has not shared details on whether any data was exfiltrated from its systems, but said it was still looking into the scope of the incident and into potentially compromised data.

The SafePlay ransomware group, which is allegedly responsible for the attack, has kept mum on the incident and it is unclear whether any data was indeed stolen and if the hackers attempted to extort Ingram Micro.

Contacted by SecurityWeek, an Ingram Micro spokesperson refrained from providing information on the attackers.

Related: Chain IQ, UBS Data Stolen in Ransomware Attack

Related: Krispy Kreme Confirms Data Breach After Ransomware Attack

Related: Fog Ransomware Attack Employs Unusual Tools

Related Content

Cybercrime

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

Data Breaches

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information.

Incident Response

The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.

Data Breaches

FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online.

Data Breaches

The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.

Ransomware

The Bureau of Alcohol, Tobacco, Firearms and Explosives has described it as a ‘major incident’ and it’s conducting an investigation with the DOJ.

Nation-State

The operation focused on a group named QTFY, which offers hacking services to the Chinese government and others.

Data Breaches

The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version