The cyber criminals behind the ransomware attack on Ingram Micro have issued an ultimatum: 3.5 TB of company data is to be released by today, August 1.
Almost a month after the ransomware attack on the major IT distributor Ingram Micro , the situation is worsening dramatically. The SafePay ransomware group listed the company on its leak website on July 29 and is threatening to release 3.5 terabytes of sensitive company data.
The process follows the typical pattern of modern ransomware attacks: After encrypting systems and stealing data, the attackers put additional pressure on their victims by threatening to publish the stolen information. This tactic is intended to increase public pressure and persuade companies to pay the ransom demanded.
No updates from Ingram Micro
Ingram Micro has not commented again on the developments since its last public statement on July 9. At that time, the distributor announced the full restoration of its global business operations.
The July announcement stated: “Ingram Micro is pleased to announce that we are now fully operational again in all countries and regions where we do business. Our teams continue to work at high speed to serve and support our customers and vendor partners.”
The recovery schedule was as follows: Starting July 7, Ingram Micro was able to bring its business processes back online, and normal services resumed by July 8. On July 8, the company reported that the incident was “contained and resolved,” and by July 9, all global operations were restored.
There has not yet been an official statement on the latest threats.