The SafePay ransomware group threatened to leak 3.5 TB of Ingram Micro’s data nearly a month after their attack, indicating ongoing extortion efforts. Despite claiming to have contained the incident, Ingram Micro has not updated its public status since July 9, and some of its websites remain offline. #SafePay #IngramMicro #RansomwareIncident
Keypoints
- The SafePay ransomware group is demanding payment and threatened to leak a massive amount of data from Ingram Micro.
- Ingram Micro claimed to have contained the attack but has not provided recent updates, suggesting ongoing issues.
- The attackers used a double extortion tactic by posting the victim on a leak blog to pressure payment.
- Some Ingram Micro websites, including regional security sites, have been restored since the attack.
- The attack has caused communication challenges and delays in restoring full operational capacity.
Read More: https://www.theregister.com/2025/07/30/ingram_micro_ransomware_threat/