05/15/2021
Ransomware has become the scourge of companies across the globe. Criminal organizations have encrypted the data of numerous companies, townships and hospitals in the United States. Recently, Colonial Pipeline was attacked by having their office data encrypted. This included their accounting data which they need to bill customers and pay vendors. According to news reports, Colonial took down their network which controls a major east coast pipeline. They did this to prevent it from being encrypted as well. This led to fuel shortages and price hikes across the east coast.
Colonial Pipeline paid a $5 million ransom to the criminals. We understand why they did this, but it only encourages more ransomware attacks on infrastructure.
We have a client that was hit with ransomware at around the same time frame. All servers, several PCs and their accounting data were encrypted. Ransom in Bitcoin equivalent to $275,000 was demanded. The criminals even managed to encrypt several different backup devices that were in place for disaster recovery.
Fortunately for my client, we were able to recover all their accounting data, restore their main server, their email server and PCs. They lost thousands of documents and spreadsheets. We were not able to do anything about those but saved a copy in case someone develops a decryption tool.
There are three things that can be done proactively to have a safety net against ransomware attacks. If you know any company that would like to have an analysis performed to see if any of these techniques are in place or can be implemented, please feel free to share this contact information:
Alonso Consulting
[email protected]
(973) 575-1414
Stopping payments would go a long way to stopping ransomware.