Indigo, a Canadian bookstore chain, has recently experienced a ransomware attack that resulted in its website and app being taken offline, as well as orders being delayed. With help from Shopify, a brand new temporary website was brought online within days, and was able to fulfil orders for customers.
The attack was confirmed to be a ransomware attack and it was discovered that data related to current and former employees was stolen by hackers. Fortunately, there has been no evidence that customer information may have been accessed. Indigo is prioritising the “safety and security” of its employees past and present, and has offered two years free credit monitoring and identity theft protection to all employees.
Notoriously, the LockBit ransomware gang is threatening to release the exfiltrated data as early as today on the dark web unless its ransom demands are not met. Indigo, however, has said that it is not prepared to cave in to the extortionists’ demands. It appears that Indigo believes there is no guarantee that paying its blackmailers will result in the sensitive information not being shared more widely.
Canadian police and the FBI are said to be working closely with Indigo as the attack is investigated. Former employees for whom Indigo has contact details will be notified of the risk via email or post.
In conclusion, Indigo has experienced a ransomware attack that has caused data related to current and former employees to be stolen. It has offered two years free credit monitoring and identity theft protection to all employees, and Canadian police and the FBI are currently investigating the attack. Former employees for whom Indigo has contact details will be notified of the risk via email or post.
Key Points:
• Canadian bookstore chain Indigo recently experienced a ransomware attack
• Data related to current and former employees was stolen
• Indigo has offered two years free credit monitoring and identity theft protection to all employees
• Canadian police and the FBI are currently investigating the attack
• Former employees for whom Indigo has contact details will be notified of the risk