Ingram Micro confirms ransomware incident

Ingram Micro has confirmed it recently identified ransomware on certain internal systems that resulted in a global IT shutdown during the past couple of days.

In a statement Ingram Micro said promptly after learning of the issue, the company took steps to secure the relevant environment, including proactively taking certain systems offline and implementing other mitigation measures.

The distributor said it also launched an investigation with the assistance of leading cyber security experts and notified law enforcement.

“Ingram Micro is working diligently to restore the affected systems so that it can process and ship orders, and the Company apologises for any disruption this issue is causing its customers, vendor partners, and others,” Ingram Micro said.

Ingram Micro’s websites now redirect partners to the cyber incident message with all websites remaining offline at the time of publication on 7 July.

Ingram Micro has been contacted for commentary.

Partners have received communication from Ingram Micro on the incident, further stating that while the investigation continues, “we are focused on bringing normal order processing capabilities back online for our customers.”

“At the same time, our team is working diligently to restore the affected systems. We thank you for your patience as work progresses. We will keep you informed with relevant updates as appropriate.”

The disruption, which began on July 3 as users on Reddit began voicing concerns and speculating on possible causes, including a ransomware attack from SafePay, which has been active since 2024 with more than 220 victims and rising.

According to a report on BleepingComputer the outages were caused by a cyberattack that occurred early Thursday morning through the company’s GlobalProtect VPN access, with employees suddenly finding ransom notes created on their devices.

Systems that are impacted include the AI-powered Xvantage distribution platform and the Impulse license provisioning platform. 

More to follow.