Ingram Micro, a major global distributor of technology solutions and managed services provider headquartered in California, confirmed on Monday it had suffered a ransomware attack responsible for an ongoing outage affecting its systems.
The initial disruption began on Thursday, largely immobilizing the company’s websites and critical network infrastructure. By Saturday evening, Ingram Micro issued a brief statement indicating efforts were underway to rectify the situation and resume normal processing of customer orders as quickly as possible.
In response to the breach, the company also formally alerted shareholders early Monday morning, ahead of the opening bell of U.S. markets, emphasizing the seriousness of the cyber incident. As one of the world’s largest providers of technology and cloud-based services, Ingram Micro plays a vital role in global supply chains, distributing tech products to thousands of corporate clients internationally. Additionally, the firm serves numerous smaller businesses as an outsourced IT solutions and managed service provider, meaning these disruptions potentially impact customers well beyond the immediate operational boundaries of Ingram Micro.
Currently, software licensing functions at the company have been particularly affected, with customers prevented from utilizing or provisioning certain products dependent upon Ingram Micro’s network and resources.
While no prominent cybercriminal group has yet claimed responsibility, reports suggest that the attack was executed by the SafePay ransomware group. Typically, attackers in such situations publicly identify victims and threaten the release of sensitive leverage data unless payment is made.
Ingram Micro spokesperson Lisa Zwick did not immediately respond when contacted for further details about the incident.
