CloudNordic and AzeroCloud Face Severe Ransomware Attack: Massive Data Loss and Ransom Demands Amidst Migration

CloudNordic and AzeroCloud, two prominent Danish cloud hosting firms, are currently facing a combined ransomware assault which has resulted in a massive loss of client data, as per their recent statements. Both companies have had to disable their email services and customer platforms. The perpetrators are demanding a ransom amounting to six Bitcoins, which is roughly $157,000, in order to decrypt the data.

The incident occurred on August 18. The individuals behind the attack, whose identities are still unknown, penetrated the cloud servers of both firms while they were transitioning to a different data center. This intrusion gave the attackers the opportunity to breach backup facilities and comprehensive data repositories, culminating in full server disk encryption.

While efforts from the IT departments have brought some servers back into operation, there hasn’t been any data recovery so far. CloudNordic, on its main page, has posted a notice in Danish indicating how the company has been severely impacted by the assault. The notification further mentions that, despite the grievous repercussions of the incident, they are neither prepared nor inclined to meet the ransom demands of the culprits. Furthermore, attempts to retrieve the compromised data have been futile, suggesting that the data loss might be irreversible.

CloudNordic has communicated that they are liaising with local police agencies, who have counseled them against acceding to the ransom request.

In their collective communication, the companies elaborated that even though all their systems were safeguarded by firewalls and antivirus programs, a few of their servers were compromised by malicious software prior to their relocation between data centers. This resulted in servers that had formerly been on distinct networks becoming connected to the firms’ core network. This network infrastructure, the firms disclosed, “oversees all our servers.” The attackers exploited this to ultimately access and encrypt the main administration and backups of CloudNordic and AzeroCloud.

Disclaimer: The views expressed in this feature article are of the author. This is not meant to be an advisory to purchase or invest in products, services or solutions of a particular type or, those promoted and sold by a particular company, their legal subsidiary in India or their channel partners. No warranty or any other liability is either expressed or implied.
Reproduction or Copying in part or whole is not permitted unless approved by author.


Please enter your comment!
Please enter your name here

Latest Articles

Sign Up for CXO Digital Pulse Newsletters

Sign Up for CXO Digital Pulse Newsletters to Download the Research Report

Sign Up for CXO Digital Pulse Newsletters to Download the Coffee Table Book

Sign Up for CXO Digital Pulse Newsletters to Download the Vision 2023 Research Report

Download 8 Key Insights for Manufacturing for 2023 Report

Sign Up for CISO Handbook 2023

Download India’s Cybersecurity Outlook 2023 Report

Unlock Exclusive Insights: Access the article