1

image
image1401×1048 130 KB

image
image2170×493 75.8 KB

Ingram Micro Issues Statement Regarding Cybersecurity Incident

anyone following the Ingram Micro Ransomware Outage? It was an unpleasant surprise yesterday when I went to login to our Ingram account to find out about this.

While all the media is talking about the the complete shutdown of Ingram Micro’s systems so they can deal with the attack what I haven’t heard any main stream media about is the risk of the attack pivoting (or already having done so) and taking advantage of Ingrams GDAP (or other Delegated access Ingram may have) Access to customers MS 365 tenants to propagate further as a Supply Chain Attack.

I know I went through our tenants last night and removed all the Ingram GDAP access until things get cleared up.

What is everyone else’s thoughts?

14 Spice ups
2

Thankfully, we don’t use them but I have in the past. None of the accounts or email addresses I personally used with them will exist now.

1 Spice up
3

Are you sure you are sure? They are used behind the scenes by many other companies as the underlying distributor. Something you may want to verify with whomever you do use today.

2 Spice ups
4

I saw that in Z’s Snap! yesterday and had the same thoughts. I haven’t been an Ingram customer for years, but I had to wonder what existing customers might be suffering. I used to work for a VAR and had daily dealings with them, and even count a few of my previous account reps as current friends today. I even remember getting stuck at their headquarters in Buffalo during a snow storm and having to sleep in one of the cubicles until we got plowed out. I’m hoping they have a quick and successful recovery and that there is no fallout to customers and such.

2 Spice ups
5

I’ll double-check with our VAR to make sure they’re not impacted but as a direct line-of-sight, we should be clear.

1 Spice up
6

They are the number 2 tech aggregator in the world IIRC. So folks like Dell, CDW, Provantage, etc all pull stock from them. There is TechData, so even if you don’t use them, it may delay some product and licenses.

4 Spice ups
7

Update: I did get in touch with my vendor/rep, who confirmed that while they do business with IM, they don’t share customer data so nothing on our end should be exposed.

8

as long your VAR doesn’t use IM for MS 365 licensing purchases you should be fine :slight_smile: If they do you can see it by looking in your MS 365 admin portal under Settings >> Partner Relationships.

1 Spice up
9

They don’t, I’ve gone round and round with my VAR about what they need to do to allow access for me and my team, so I’m very aware of who is attached to our MS365 licenses/agreements…

1 Spice up
10

We use them for our monthly SPLA reporting that’s required to be completed by the 5th of the month. Hopefully we’ll get an extension this time around. :wink: What a mess.

2 Spice ups
11

They didn’t “proactively” take anything offline; it was all reactive. It would be wonderful if companies were just honest and transparent.

2 Spice ups