Forest Global Training Partners

Cyber Risks · Krebs on Security

Payment Processing Giant TSYS: Ransomware Incident “Immaterial” to Company

Summary: Payment card processor TSYS suffered a ransomware attack earlier this month, and on December 8 the Conti gang published more than 10 gigabytes of data it claimed to have taken from TSYS's networks, saying that represents just 15 percent of what it offloaded. TSYS said the attack hit systems supporting corporate back office functions of a legacy merchant business, identified by Conti as Cayan, and that transaction processing runs on separate systems with no card data impacted.

What's compelling: Conti typically only publishes stolen data from victims that refuse to negotiate a ransom, according to Emsisoft's Fabian Wosar, so the posted files are themselves a signal about how the negotiation went. An FS-ISAC report cited here counted at least eight financial institutions hit with ransomware in the previous four months, with Ryuk the most prolific threat to the sector.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related