pitney bowes building

Shipping Giant Pitney Bowes’ Services Stalled by Ransomware Attack

The company, which serves over 1.5 million clients, has been able to get some services back online but is still working to address the damage.

Mailing services company Pitney Bowes, which handles shipping technology for more than 1.5 million clients around the globe, was hit with a ransomware attack on Monday.

The company acknowledged on Monday that the malware attack, which encrypted information on its computer systems, had disrupted customer access to some of its services. In a statement, Pitney Bowes said it had hired a third-party consultant to help them address the problem.

“We apologize for any disruption to your systems,” the shipping giant posted on Twitter. “We are working to restore affected systems.”

On Tuesday, the company said it has seen “no evidence” that customer or employee data has been “improperly accessed,” ruling out the possibility of a data breach so far. The attack appears to have affected customers’ ability to upload funds to their postage meters in order to pay for and print postage. Customers were complaining of issues on Twitter through Tuesday afternoon.

“If you have funds loaded you are able to print postage,” Pitney Bowes wrote in an update on its website. “Restoring your meter’s postage refill capability is our highest priority.”

In addition, Pitney Bowes’ commerce services were hit by the attack, affecting their ability to properly sort packages. Though the company says it is now moving delivery parcels through its network again, it is still working to address issues with fulfillment.

“Fulfillment has been more complex to solve, and we have begun to restart facilities,” the company wrote, adding that further updates will follow.

Read More: FBI Warns Businesses and Organizations of Rising “High-Impact” Ransomware Threat

Stuart Reed, a cybersecurity expert and vice president at the British cybersecurity firm Nominet, said that the Pitney Bowes attack could be an example of companies failing to address the threat of malicious actors.

“Despite daily headlines of companies being breached, two thirds of C-suite executives admit to having knowledge gaps about ransomware,” Reed said, citing a study conducted by Nominet. “Consequently, this begs the question whether enough is being done to prevent ransomware.”

Reed added: “IT teams also need to ensure that system patches are kept up to date and backups put in place. Only with this layered approach to security, combined with understanding and buy-in from the C-Suite, will ransomware attack numbers begin to subside.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

Featured Cybersecurity

Webinars

New Products

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis. 3