Information technology products provider Ingram Micro announced July 5 that it recently identified ransomware on certain internal systems. Since then, company officials believe they have contained the threat.

In the company’s initial update, Ingram Micro said it took action to secure the affected systems, including proactively taking certain systems offline and implementing mitigation measures. It also launched an investigation with the support of cybersecurity experts and notified law enforcement authorities.

According to BleepingComputer, the attack was carried out by the SafePay ransomware group, which claimed it exploited vulnerabilities in Ingram Micro’s systems. The group emphasized that the attack was financially motivated and not politically driven.

MDM Case Study: Wesco (Premium access here) 

In the days since the incident, Ingram Micro shared ongoing updates about its recovery efforts. The company has been working to restore its ordering systems and, as of July 8, confirmed that it can now receive and process orders for hardware and other technologies, as well as subscriptions, via phone or email in the U.S., though it noted that “some limitations may exist which will be clarified as orders are placed.”

An additional update followed, indicating significant progress, with Ingram Micro collaborating with third-party experts to return systems to normal operations.

IT Provider Ingram Micro Looking to Shed Distributor Label (March 21)

In its latest statement on July 8, the company said: “Based on these measures and the assistance of third-party cybersecurity experts, we believe the unauthorized access to our systems related to the incident is contained and the affected systems have been remediated. Our investigation into the scope of the incident and any impacted data remains ongoing.”

Click here to read more about the cybersecurity incident.