Rectron struck by cyberattack

mylesillidge

Journalist
Joined
Jul 29, 2021
Messages
4,151
Reaction score
4,430
Major South African tech distributor hit by cyberattack

South African technology distributor Rectron confirmed that it was affected by a cyberattack in a statement issued on Wednesday, 22 July.

"Rectron regrets to inform you that we have become the latest victim of a cyberattack — an all-too-familiar phenomenon in South Africa and indeed around the world," it said.
 
There's a lot said that isn't said.

"contacted external forensic specialists" - implies they don't havae the complete picture, and these guys will likely be getting logs, identifying attack vectors and persistence mechanisms, assessing what (if anything) was accessed, imaging disks for forensic analysis, etc.

"containment" - implies the attacker had or may still have access, and this will likely involve isolation, resetting credentials, rebuilding AD, etc before systems are brought back online

"recovery" - implies the current dataset is unusable, which suggests ransomware

"notified the Information Regulator of South Africa" - strongly implies that personal information has been compromised, or at least there's a possibility thereof
 
Top
Sign up to the MyBroadband newsletter
X