DXC subsidiary hit by ransomware attack
Some customers with the insurance-based company Xchanging were unable to access IT services
Global IT services provider DXC Technology has confirmed that its subsidiary managed service business, Xchanging, was recently targeted by a ransomware attack.
The company is confident that the attack was isolated to the confines of the Xchanging network, with no data that belongs to the managed services subsidiary for the insurance sector compromised or stolen.
Little information on the timescale of the attack or the scale of resultant disruption has been offered by DXC, but the company confirmed it implemented a series of containment and remediation measures to resolve the situation.
DXC is also working with affected customers to restore access to their operating environment as quickly as possible. This is in addition to a continued dialogue with law enforcement and cyber security agencies.
The company assists global firms with the smooth running of mission-critical systems and operations while also engaging in digital transformation endeavours, and ensuring security and scale across several types of cloud environment. Prominent customers include DreamWorks Animation, Aviva and the NHS.
Xchanging, meanwhile, is a business process and technology services provider and systems integrator, headquartered in London, with customers exclusively in the insurance sector.
Ransomware has been on the rise in recent months in years, causing disruption for a number of high profile targets of late, including Japanese car manufacturer Honda, in June. The ransomware attack forced the company to put manufacturing on hold in some locations.
Another key firm in the IT channel, Cognizant, suffered a large ransomware attack in April 2020, which directly involved internal systems and led to service disruptions for a handful of its clients.
The kind of ransomware that may potentially target your business also varies depending on the sector you’re in and where your business is geographically-based. In the UK, for instance, Leeds-based companies are most likely to fall victim to Rapid ransomware, while GrandCrab ransomware will be the cause for most ransomware attacks in Manchester.
What’s indisputable, however, is that ransomware threats are becoming more present, with a 195% increase in reported incidents between 2018 and 2019.
-
US gov makes $2bn investment in domestic quantum firmsNews The Department of Commerce says it wants to strengthen the country's presence in this critical technology sector
-
Data center industry faces ticking power time bombNews Technical and regulatory hurdles make colocation unscalable for most developers, Wood Mackenzie has warned
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recoveryNews Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
-
Ransomware gangs are using employee monitoring software as a springboard for cyber attacks
News Two attempted attacks aimed to exploit Net Monitor for Employees Professional and SimpleHelp
-
Ransomware gangs are sharing virtual machines to wage cyber attacks on the cheap – but it could be their undoingNews Thousands of attacker servers all had the same autogenerated Windows hostnames, according to Sophos
