Ingram Micro: Ingram Micro confirms it has been hit by ransomware

Ingram Micro Confirms Ransomware Attack Disrupting Internal Systems

Global IT product distributor Ingram Micro has confirmed a ransomware attack that disrupted its operations over the U.S. holiday weekend. The company proactively took certain internal systems offline to contain the breach and strengthen its defenses, though it has not disclosed whether any data was exfiltrated.

Speculation about the incident began after Ingram Micro’s website went offline unexpectedly, raising concerns about a potential cyberattack. The company later acknowledged the ransomware intrusion in a statement on its investor relations website.

While the exact threat actor behind the attack remains unconfirmed, the incident highlights the ongoing risk of ransomware targeting critical supply chain and distribution networks. No further details on the scope of the breach or potential impact on customers have been released.

Source: https://grahamcluley.com/ingram-micro-confirms-it-has-been-hit-by-ransomware/

Ingram Micro TPRM report: https://www.rankiteo.com/company/ingram-micro

"id": "ing1771976571",
"linkid": "ingram-micro",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Technology/Distribution',
                        'location': 'Global',
                        'name': 'Ingram Micro',
                        'type': 'IT product distributor'}],
 'description': 'Global IT product distributor Ingram Micro confirmed a '
                'ransomware attack that disrupted its operations over the U.S. '
                'holiday weekend. The company proactively took certain '
                'internal systems offline to contain the breach and strengthen '
                'its defenses, though it has not disclosed whether any data '
                'was exfiltrated.',
 'impact': {'operational_impact': 'disrupted operations',
            'systems_affected': 'internal systems'},
 'references': [{'source': 'Ingram Micro investor relations website'}],
 'response': {'communication_strategy': 'acknowledged the ransomware intrusion '
                                        'in a statement on its investor '
                                        'relations website',
              'containment_measures': 'took certain internal systems offline',
              'incident_response_plan_activated': 'proactively took certain '
                                                  'internal systems offline',
              'remediation_measures': 'strengthened defenses'},
 'title': 'Ingram Micro Ransomware Attack',
 'type': 'ransomware'}