unknown attacks ScanSource
Incident Date:
May 16, 2023
Overview
Title
unknown attacks ScanSource
Victim
ScanSource
Attacker
Unknown
Location
First Reported
May 16, 2023
ScanSource Confirms Ransomware Attack
ScanSource has confirmed that it has suffered a ransomware attack affecting some of its systems, business operations, and customer portals. The US-based technology provider specializes in cloud service, SaaS connectivity, and network confirmations, as well as offering special PoS (point of sale) and payments, security, and AIDC (automatic identification and data capture) solutions.
ScanSource customers first contacted BleepingComputer on May 15th 2023, complaining that they could not access the company's customer portals and websites. SnanSource confirmed the cyber attack on May 15th.
Incident Response and Impact
The company has initiated its incident response plan, alerting law enforcement, and employing forensic and cybersecurity professionals.
Technology provider ScanSource has announced it has fallen victim to a ransomware attack impacting some of its systems, business operations, and customer portals.
ScanSource is a U.S.-based cloud service and SaaS connectivity and network communications provider that also offers special PoS (point of sale) and payments, security, and AIDC (automatic identification and data capture) solutions.
The firm is also the owner of the cloud service provider and education platform Intelisys, and cloud distributor and managed services provider intY.
Customer Concerns and Confirmation
Starting around May 15th, ScanSource customers contacted BleepingComputer saying they no longer had access to the company's customer portals and websites, concerned that they suffered a cyberattack.
ScanSource confirmed on May 16th that they suffered a ransomware attack on May 14, 2023, that impacted some of its systems.
The company began implementing its incident response plan, including alerting law enforcement and enlisting the aid of forensic and cybersecurity professionals. ScanSource has warned that there will be service delays, particularly in North America and Brazil.
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.