Ransomware attack affecting Tietoevry's services to some customers in Sweden
1–10 of 22 posts
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#2"One of Tietoevry’s several datacenters in Sweden has become partially subject to a ransomware attack."
Sounds bad.
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#3"One of Tietoevry’s several datacenters in Sweden has become partially subject to a ransomware attack." Sounds bad.
Yeah. From what I know at least Filmstaden (Swedens biggest cinema chain, owned by AMC) can’t sell a thing right now. No tickets can be sold at all, and no snacks can be sold at the cinema either :(
Rusta is another affected store chain. I guess there is a lot more affected customers unknown to the public right now
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#4"One of Tietoevry’s several datacenters in Sweden has become partially subject to a ransomware attack." Sounds bad.
Yeah. From what I know at least Filmstaden (Swedens biggest cinema chain, owned by AMC) can’t sell a thing right now. No tickets can be sold at all, and no snacks can be sold at the cinema either :( Rusta is another affected store chain. I guess there is a lot more affected customers unknown to the public right now
Granngården is another.
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#5Tietoevry is one of these firms MBAs use to dismantle the it-department and outsorce it to.
I've always thought these centralized point of failures are a bad idea.
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#6Earlier quoted context omitted.
Yeah. From what I know at least Filmstaden (Swedens biggest cinema chain, owned by AMC) can’t sell a thing right now. No tickets can be sold at all, and no snacks can be sold at the cinema either :( Rusta is another affected store chain. I guess there is a lot more affected customers unknown to the public right now
Granngården is another.
Yeah, and parts of Vellinge Kommun as well. Apparently a lot of their day-to-day-systems are affected [0].
Also, a HR system called primula is affected. It is mostly used by universities from what I can gather.
[0] = https://www.dn.se/sverige/it-attacken-paverkar-myndigheter-o... (Swedish, one of the biggest newspaper in Sweden)
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#7"One of Tietoevry’s several datacenters in Sweden has become partially subject to a ransomware attack." Sounds bad.
It only affecting one datacenter is good news, IMO:
It makes it likely that the attackers didn't breach Tietoevry itself, or that they had only very limited access (unless Tietoevry has incredibly good separation between business units, so that only a small subset is affected).
That increases the chance that the customers have to deal with an outage, not an outage followed by ransom demands and their customer data being leaked.
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#8Seen people speculate online that everything in AS25473 and AS34950 is affected, and that unpatched Ivanti Endpoint Manager Mobile could be the entry point https://www.shodan.io/host/193.8.33.135
Not sure how credible that is? I don't understand how that could take down the whole data center.
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#9Tietoevry is one of these firms MBAs use to dismantle the it-department and outsorce it to. I've always thought these centralized point of failures are a bad idea.
With extra sauce of numerous mergers and rebrandings. So, every 3 to 7 years, this phoenix of shit is reborn
Re: Ransomware attack affecting Tietoevry's services to some customers in Sweden
#10"One of Tietoevry’s several datacenters in Sweden has become partially subject to a ransomware attack." Sounds bad.
[deleted]