Ransomware Attack Compromises Indigo Employees' Data

As per Indigo Books & Music Inc., a ransomware attack compromised the data of current and former employees at Canada’s largest bookstore chain. Indigo said in a statement on its website that the February 8 breach left no evidence that customers’ personal information, such as credit card numbers, had been accessed, but that “some employee data was.”

The Toronto-based retailer announced that it has contracted with consumer reporting agency TransUnion of Canada to provide employees free credit monitoring and identity theft protection credit monitoring and identity theft protection to employees for two years. Customers can still not make online purchases except for “select books” after Indigo shut down its website and app due to a “cyberattack” last week.

When the incident started more than two weeks ago, Indigo could only process in-store cash purchases, but some of its services, such as over-the-counter credit and debit payments, exchanges, and returns, have since been revived. The company hired third-party experts to probe and resolve the issue, but the incident was not publicly acknowledged as a ransomware attack affecting employees until this week.

“Both current and former employees are being notified that their information may have been impacted,” the statement reads.

Data breac

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents