Kaseya VSA Cyberattack

Kaseya, a software company that provides services to more than 40,000 organizations around the world, said on 2/7/2021 that had been the victim of a cyberattack.

The company asked customers that use its systems management platform, called VSA, to immediately shut down their servers to avoid any possibility of being compromised by attackers.

REvil, a Russian cybercriminal group may be was behind the hacking  .

Some of the affected companies were being asked for $5 million in ransom. At least 200 companies were at risk.

Kaseya handles large enterprise all the way to small businesses globally, so ultimately, it has the potential to spread to any size or scale business. “This is a colossal and devastating supply-chain attack.”

The United States Cybersecurity and Infrastructure Security Agency also described the incident in a statement on its website as a “supply-chain ransomware attack.” It urged Kaseya’s customers to shut down their servers and said it was investigating.

Hackers have carried out a slate of prominent cyberattacks against U.S. companies in recent months, including JBS and Colonial Pipeline, which moves fuel along the East Coast. Both were ransomware attacks, in which hackers try to shut down systems until a ransom is paid. The video game company Electronic Arts was also recently hacked, but its data was not held for ransom.