Finnish IT software services provider Tietoevry said it suffered a serious ransomware attack that affected one of its data centres in Sweden.

Tietoevry offers managed services and cloud hosting services to a number of large corporations, including Primula, a widely used payroll and HR company in Sweden and Filmstaden, the country’s largest cinema chain.

In a recent data security incident notice, Tietoevry said that during the night of January 19 and 20, it suffered a significant cyber security incident that affected one of its data centres in Sweden. This disrupted Tietoevry’s services to some of its customers in the country.

“Tietoevry immediately isolated the affected platform, and the ransomware attack has not affected other parts of the company’s infrastructure. Tietoevry has taken the highest level of action to investigate, mitigate and resolve the situation,” the company said.

“A large team of experts are working on several tracks in parallel around the clock on this. We have notified the directly affected customers and are in dialogue with them for updates on the situation,” it added.

The company also blamed the notorious Akira ransomware group for the cyber attack on its Swedish data centre. While Tietoevry did not comment on whether any data was exfiltrated from its internal network or the nature of the compromised data, it said that restoration work is ongoing but could not comment on how long it will take.

“Tietoevry takes the situation very seriously and has an extensive team of experts and technicians working around the clock to minimize the impact and restore services.

“Tietoevry has over the weekend completed the thorough preparations essential for initiating restoration of the customer-specific services. Currently, Tietoevry cannot say how long the restoration process as a whole will take – considering the nature of the incident and the number of customer-specific systems to be restored, the total timespan may extend over several days, even weeks.

“We are focused on resolving this as soon as technically possible, in close collaboration with the customers in question,” the company said.

Tietoevry added that it has increased the “preparedness and surveillance of its infrastructure overall as a security measure” and is working with relevant law enforcement authorities including the Swedish police to resolve the matter.

Commenting on the ransomware attack, Venke Bordal, the head of Tietoevry Tech Services Sweden, said, “We understand that this situation is challenging for the impacted customers, and we are making every effort to ensure that they are kept up to date on the progress being made. We regret the inconvenience caused by this malicious attack on our customers and all those affected by it. Our priority is to continue with bringing our customers’ services back safely and efficiently.”

The ransomware attack on Tietoevry’s Swedish data centre has affected several organisations who took IT services from the company. This includes discount retail chain Rusta, farming supplier Grangnården and raw building materials provider Moelven.

In statements shared with the media, all these companies said that they are aware of the cyber security incident and are working with Tietoevry to fix the issue. While Moelven said that its internal network wasn’t attacked directly, Rusta said it has faced disruption in its daily operations and is working in a limited capacity.

Finnish IT software services provider Tietoevry said it suffered a serious ransomware attack that affected one of its data centres in Sweden.

Tietoevry offers managed services and cloud hosting services to a number of large corporations, including Primula, a widely used payroll and HR company in Sweden and Filmstaden, the country’s largest cinema chain.

In a recent data security incident notice, Tietoevry said that during the night of January 19 and 20, it suffered a significant cyber security incident that affected one of its data centres in Sweden. This disrupted Tietoevry’s services to some of its customers in the country.

“Tietoevry immediately isolated the affected platform, and the ransomware attack has not affected other parts of the company’s infrastructure. Tietoevry has taken the highest level of action to investigate, mitigate and resolve the situation,” the company said.

“A large team of experts are working on several tracks in parallel around the clock on this. We have notified the directly affected customers and are in dialogue with them for updates on the situation,” it added.

The company also blamed the notorious Akira ransomware group for the cyber attack on its Swedish data centre. While Tietoevry did not comment on whether any data was exfiltrated from its internal network or the nature of the compromised data, it said that restoration work is ongoing but could not comment on how long it will take.

“Tietoevry takes the situation very seriously and has an extensive team of experts and technicians working around the clock to minimize the impact and restore services.

“Tietoevry has over the weekend completed the thorough preparations essential for initiating restoration of the customer-specific services. Currently, Tietoevry cannot say how long the restoration process as a whole will take – considering the nature of the incident and the number of customer-specific systems to be restored, the total timespan may extend over several days, even weeks.

“We are focused on resolving this as soon as technically possible, in close collaboration with the customers in question,” the company said.

Tietoevry added that it has increased the “preparedness and surveillance of its infrastructure overall as a security measure” and is working with relevant law enforcement authorities including the Swedish police to resolve the matter.

Commenting on the ransomware attack, Venke Bordal, the head of Tietoevry Tech Services Sweden, said, “We understand that this situation is challenging for the impacted customers, and we are making every effort to ensure that they are kept up to date on the progress being made. We regret the inconvenience caused by this malicious attack on our customers and all those affected by it. Our priority is to continue with bringing our customers’ services back safely and efficiently.”

The ransomware attack on Tietoevry’s Swedish data centre has affected several organisations who took IT services from the company. This includes discount retail chain Rusta, farming supplier Grangnården and raw building materials provider Moelven.

In statements shared with the media, all these companies said that they are aware of the cyber security incident and are working with Tietoevry to fix the issue. While Moelven said that its internal network wasn’t attacked directly, Rusta said it has faced disruption in its daily operations and is working in a limited capacity.https://www.teiss.co.uk