Archive — US — techcrunch
Ingram Micro says ongoing outage caused by ransomware attack
Ingram Micro, a major U.S. technology distributor, reported an ongoing outage due to a ransomware attack that began Thursday, disrupting network operations and software licensing for customers. The company, which provides managed IT services, is working to restore systems after notifying shareholders of the breach, which may involve the SafePay ransomware gang.
Key points
- Ingram Micro experienced a ransomware attack that started on Thursday, leading to a significant service outage.
- The attack caused the company's website and network systems to shut down, affecting their ability to process orders and manage software licensing.
- On Saturday, the company stated it was working on system restoration, and on Monday, it informed shareholders about the breach.
- No major ransomware group has claimed responsibility, but reports suggest involvement from the SafePay gang.
- Ransomware attacks often lead to the extortion of companies through threats of data release, a common tactic among ransomware groups.
Why it matters
- Ransomware incidents like this are part of a larger trend seen in 2025, where cybersecurity threats have surged amid increased digital transformation efforts.
- The growing reliance on managed service providers highlights vulnerabilities in corporate infrastructures.
- Historical parallels can be drawn to other major ransomware attacks in recent years, emphasizing the need for robust cybersecurity measures across industries.
Ingram Micro's ransomware attack highlights critical vulnerabilities in technology distribution and managed services, reflecting a broader trend of escalating cyber threats that demand attention from corporate IT security strategies.