Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 14 submissions in the queue.

Submission Preview

Link to Story

Tietoevry on Today's List of Breached Companies

Accepted submission by canopic jug at 2024-01-23 06:40:25 from the windows-tco dept.
Security

Multiple sites are reporting that Teitoevry, based in Finland, has been breached by the Akira ransomware crew. The compromise affects electronic health records, movie ticket sales, some universities and colleges, and some regional authorities and municipal councils among their Swedish customers:

Officials in Uppsala County, located on the east-central coast of Sweden, launched crisis management plans after the region's patient medical record system went offline and some financial systems became unavailable, warning that the situation could deteriorate unless the systems are restored quickly.

BankInfoSecurity: Ransomware Hit on Tietoevry Causes IT Outages Across Sweden [bankinfosecurity.com]

And

The Säkerhetspolisen, Sweden's security service responsible for counterintelligence, did not immediately respond to an enquiry about potential risks related to government payroll information being exposed to criminals.

Recorded Future News: Akira ransomware hits cloud service Tietoevry; numerous Swedish customers affected [therecord.media]

And

Tietoevry confirmed today that the ransomware attack occurred Friday night into Saturday morning and has impacted one of their data centres in Sweden.

Global Security Mag: Expert Comment: Tietovery’s Swedish Data Cente impacted by Akira Ransomware Attack [globalsecuritymag.fr]

Major Windows compromises like this seem to be written up daily in cybersecurity news. This post is not to single out Teitoevry specifically. Instead, the takeaway should be about the futility and irresponsibility of deploying M$ Windows in ether a networked or a production environment, especially since appropriate alternatives have existed since the dawn of the Internet. As usual, the spin is to conflate successful breaches and attacks. That conflation has the apparent goal of making the public complacent and accepting avoidable compromises as unavoidable.

Also at:
Bitdefender: Ransomware Attack on IT Provider Downs Swedish Government Agencies, Schools, Companies [bitdefender.com]
Sveriges Radio: Cyber attack against Tietoevry - cinemas and businesses affected [sverigesradio.se]
The Local, Sweden: Hacker attack against Swedish data centre knocks out cinema sales systems [thelocal.se]
Cybersecurity Help s.r.o.: Ransomware attack on Finnish IT provider Tietoevry causes downtime for customers in Sweden [cybersecurity-help.cz]
CyberRisk Alliance LLC: Akira ransomware group’s changing tactics: What you need to know [scmagazine.com]

It appears that Akira ransomware [sophos.com] is one of the more common ones.


Original Submission