Ingram Micro says ongoing outage caused by ransomware attack

Ingram Micro, a prominent U.S.-based technology distributor and managed services provider, confirmed on Monday that a ransomware attack has led to a significant outage affecting its operations. The cyberattack initiated on Thursday, resulting in the company’s website and a substantial portion of its network becoming inaccessible. By late Saturday, Ingram Micro issued a concise update indicating that efforts were underway to restore systems, enabling the company to resume order processing. On Monday, the firm notified its shareholders about the incident ahead of the market opening in the United States. As one of the world's leading technology distributors, Ingram Micro plays a crucial role in delivering hardware and tech solutions to businesses worldwide. Additionally, it functions as a managed service provider, offering outsourced IT services for smaller corporate clients. The ongoing outage has been reported to disrupt software licensing, impacting customers' ability to utilize or provision certain products that depend on Ingram Micro's systems. While no major ransomware group has publicly claimed responsibility for the attack, reports from Bleeping Computer suggest involvement from the SafePay ransomware gang. It is not unusual for ransomware groups to identify their targets and release portions of stolen data to coerce victims into paying ransoms. Ingram Micro's spokesperson, Lisa Zwick, has not yet responded to inquiries regarding the matter. If you have insights about the ransomware attack on Ingram Micro or are a corporate customer experiencing disruption, please reach out to this reporter securely through an encrypted message on Signal.