pitney bowes building

Shipping Giant Pitney Bowes’ Services Stalled by Ransomware Attack

The company, which serves over 1.5 million clients, has been able to get some services back online but is still working to address the damage.

Mailing services company Pitney Bowes, which handles shipping technology for more than 1.5 million clients around the globe, was hit with a ransomware attack on Monday.

The company acknowledged on Monday that the malware attack, which encrypted information on its computer systems, had disrupted customer access to some of its services. In a statement, Pitney Bowes said it had hired a third-party consultant to help them address the problem.

“We apologize for any disruption to your systems,” the shipping giant posted on Twitter. “We are working to restore affected systems.”

On Tuesday, the company said it has seen “no evidence” that customer or employee data has been “improperly accessed,” ruling out the possibility of a data breach so far. The attack appears to have affected customers’ ability to upload funds to their postage meters in order to pay for and print postage. Customers were complaining of issues on Twitter through Tuesday afternoon.

“If you have funds loaded you are able to print postage,” Pitney Bowes wrote in an update on its website. “Restoring your meter’s postage refill capability is our highest priority.”

In addition, Pitney Bowes’ commerce services were hit by the attack, affecting their ability to properly sort packages. Though the company says it is now moving delivery parcels through its network again, it is still working to address issues with fulfillment.

“Fulfillment has been more complex to solve, and we have begun to restart facilities,” the company wrote, adding that further updates will follow.

Read More: FBI Warns Businesses and Organizations of Rising “High-Impact” Ransomware Threat

Stuart Reed, a cybersecurity expert and vice president at the British cybersecurity firm Nominet, said that the Pitney Bowes attack could be an example of companies failing to address the threat of malicious actors.

“Despite daily headlines of companies being breached, two thirds of C-suite executives admit to having knowledge gaps about ransomware,” Reed said, citing a study conducted by Nominet. “Consequently, this begs the question whether enough is being done to prevent ransomware.”

Reed added: “IT teams also need to ensure that system patches are kept up to date and backups put in place. Only with this layered approach to security, combined with understanding and buy-in from the C-Suite, will ransomware attack numbers begin to subside.”

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

New Products

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.