Update From Tietoevry After Ransomware Attack

The latest from Tietoevry on that ransomware thing;

The ransomware attack on one of Tietoevry’s data centers in Sweden took place during the night of January 19-20. Tietoevry was able to stop the attack and limit the impact to one platform. The attack impacted a number of Tietoevry’s customers across industries and has thus been visible in the Swedish society in many ways. Tietoevry sincerely regrets the challenges this criminal attack has caused to our customers, and to many entities and individuals as consequence.

Tietoevry has continued relentless work to restore all affected customer services. Today the technical system restoration stands at 97% completion, and recovery of customers’ full services is currently at 83% completion. The overall status signifies that few customer-specific situations are more complicated and Tietoevry continues working with the highest priority on actions to support customers for full service recovery.

Tietoevry takes this ransomware attack extremely seriously and seeks to ensure both a thorough investigation and sustainable recovery. Immediately upon the attack the company’s security experts assessed potential attack vectors and carried out related security verifications as well as actions to secure operations. Tietoevry’s experts have also conducted large-scale data analysis as part of the investigation. The company has in addition involved third party experts for forensic analysis to verify the findings and the attack method. The findings are shared with the authorities on ongoing basis. Tietoevry has also involved third party experts in resolving the most complicated system restorations.

“It has been disheartening to see the challenges our customers, many other entities as well as individuals have faced as result of the criminal attack, and I sincerely apologize for this. It is also distressing to get a first-hand validation that we are living in “a new normal” where cybercrime is growing in numbers and potential impact. The advancements in digitalization and technology that come with many benefits to businesses, individuals and societies, are unfortunately also providing new tools for the cybercriminals”, comments Kimmo Alkio, CEO of Tietoevry.

”As Tietoevry we are part of the Nordic society ourselves and take seriously the responsibility of being in the forefront of digital security – this demands for us to constantly improve. We have always had high focus on our security posture, but we look at the realities of today and tomorrow humbly, and are carrying out wider-scale additional cybersecurity investments and actions. It is important for the good forces on all levels of the society to take joint action in order to mitigate the actions of cyber criminals”, he continues.

In light of Tietoevry’s role as a service provider, the criminal nature of the attack and for security reasons, Tietoevry cannot publicly share technical details of the attack. Tietoevry is at all times committed to respecting contractual obligations and customer confidentiality, thus the company cannot share customer-specific information regarding this case.