Update From Tietoevry After Ransomware Attack

Latest update from Tietoevry as they reset their systems following a ransomware attack;

The ransomware attack on one of Tietoevry’s data centers in Sweden took place during the night of January 19-20. Tietoevry immediately isolated the affected platform, and the attack has not affected other parts of the company’s infrastructure. Tietoevry continues to work around the clock with an extensive team of experts and technicians to restore services for the impacted customers. The systematic multi-phase work is advancing relentlessly in collaboration with the customers in question.

We wish to share that the first set of customer-specific systems impacted by the attack have been recovered and are up and running. Our efforts are aimed at ensuring a carefully planned sequenced flow of more customer systems reaching this state on ongoing basis.

Overall the customer-specific situations vary greatly, for example in terms of the solutions in question, customer-specific workloads and the volume and complexity of related data restoration. A restricted number of customer situations will require additional restoration actions that are being planned in close dialogue with those customers.

Considering the nature of the incident and the number of customer-specific systems to be restored, the restoration process extends over several days, even weeks.

“We have to proceed very systematically and thoroughly to ensure quality and security. We are making every effort to bring our customers’ services back safely as soon as technically possible. We regret the inconvenience caused by this malicious attack on our customers and all those affected by it.

We will continue our close collaboration with the police and other authorities and will accommodate them in every possible way to support the investigation. We are very eager to solve this and work together to prevent future cyberattacks on our society, with the safety and security of both ourselves and our customers in mind,” says Venke Bordal, Head of Market Sweden, Tietoevry Tech Services.

As ransomware attack is a serious criminal act, Tietoevry initiated contacts with the relevant authorities without delay, including the Swedish police. The police report was filed on the morning of Saturday January 20, and the active dialogue with authorities continues.