pitney bowes building

Shipping Giant Pitney Bowes’ Services Stalled by Ransomware Attack

The company, which serves over 1.5 million clients, has been able to get some services back online but is still working to address the damage.

Mailing services company Pitney Bowes, which handles shipping technology for more than 1.5 million clients around the globe, was hit with a ransomware attack on Monday.

The company acknowledged on Monday that the malware attack, which encrypted information on its computer systems, had disrupted customer access to some of its services. In a statement, Pitney Bowes said it had hired a third-party consultant to help them address the problem.

“We apologize for any disruption to your systems,” the shipping giant posted on Twitter. “We are working to restore affected systems.”

On Tuesday, the company said it has seen “no evidence” that customer or employee data has been “improperly accessed,” ruling out the possibility of a data breach so far. The attack appears to have affected customers’ ability to upload funds to their postage meters in order to pay for and print postage. Customers were complaining of issues on Twitter through Tuesday afternoon.

“If you have funds loaded you are able to print postage,” Pitney Bowes wrote in an update on its website. “Restoring your meter’s postage refill capability is our highest priority.”

In addition, Pitney Bowes’ commerce services were hit by the attack, affecting their ability to properly sort packages. Though the company says it is now moving delivery parcels through its network again, it is still working to address issues with fulfillment.

“Fulfillment has been more complex to solve, and we have begun to restart facilities,” the company wrote, adding that further updates will follow.

Read More: FBI Warns Businesses and Organizations of Rising “High-Impact” Ransomware Threat

Stuart Reed, a cybersecurity expert and vice president at the British cybersecurity firm Nominet, said that the Pitney Bowes attack could be an example of companies failing to address the threat of malicious actors.

“Despite daily headlines of companies being breached, two thirds of C-suite executives admit to having knowledge gaps about ransomware,” Reed said, citing a study conducted by Nominet. “Consequently, this begs the question whether enough is being done to prevent ransomware.”

Reed added: “IT teams also need to ensure that system patches are kept up to date and backups put in place. Only with this layered approach to security, combined with understanding and buy-in from the C-Suite, will ransomware attack numbers begin to subside.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Gaining a Competitive Edge

    Ask most companies about their future technology plans and the answers will most likely include AI. Then ask how they plan to deploy it, and that is where the responses may start to vary. Every company has unique surveillance requirements that are based on market focus, scale, scope, risk tolerance, geographic area and, of course, budget. Those factors all play a role in deciding how to configure a surveillance system, and how to effectively implement technologies like AI. Read Now

  • 6 Ways Security Awareness Training Empowers Human Risk Management

    Organizations are realizing that their greatest vulnerability often comes from within – their own people. Human error remains a significant factor in cybersecurity breaches, making it imperative for organizations to address human risk effectively. As a result, security awareness training (SAT) has emerged as a cornerstone in this endeavor because it offers a multifaceted approach to managing human risk. Read Now

  • The Stage is Set

    The security industry spans the entire globe, with manufacturers, developers and suppliers on every continent (well, almost—sorry, Antarctica). That means when regulations pop up in one area, they often have a ripple effect that impacts the entire supply chain. Recent data privacy regulations like GDPR in Europe and CPRA in California made waves when they first went into effect, forcing businesses to change the way they approach data collection and storage to continue operating in those markets. Even highly specific regulations like the U.S.’s National Defense Authorization Act (NDAA) can have international reverberations – and this growing volume of legislation has continued to affect global supply chains in a variety of different ways. Read Now

  • Access Control Technology

    As we move swiftly toward the end of 2024, the security industry is looking at the trends in play, what might be on the horizon, and how they will impact business opportunities and projections. Read Now

Featured Cybersecurity

Webinars

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3