As BleepingComputer reported earlier this month, Ingram Micro also suffered a global outage caused by the SafePay ransomware attack, with employees told to work from home and the company's website and ordering systems taken offline. The SafePay ransomware gang is threatening to leak 3.5TB of data belonging to IT giant Ingram Micro, allegedly stolen from the company's compromised systems earlier this month. While BleepingComputer first reported on July 5 that SafePay was behind this incident, the ransomware gang didn't claim responsibility for the attack until earlier this week, when it added the tech giant to its dark web leak portal. Ingram Micro quickly recovered from the incident, restoring many of the internal systems and platforms impacted by the attack within days, allowing employees greater access to its ordering system. Ingram Micro is one of the world's largest business-to-business service providers and technology distributors, offering a wide range of solutions to resellers and managed service providers worldwide, including hardware, software, cloud services, logistics, and training. SafePay ransomware is a private operation that surfaced in September 2024 and has since added over 260 victims to its leak site; however, the actual number is likely larger, as only victims who don't pay are listed. However, the company has yet to confirm that SafePay ransomware was behind the breach and whether the attackers stole data from its compromised systems.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Wed, 30 Jul 2025 18:00:27 +0000