Ingram Micro have been experiencing some kind of ’technical issue’, including of their corporate and orders website.
14-hour+ global blackout at Ingram Micro halts customer orders

Exclusive: Fears mount while distie remains silent and phone lines down

The Register
Ingram Micro are now 24 hours into a total outage, which includes their website and all of their internal IT.
The only comms they’ve posted is this, phone lines are all down.
Ingram Micro sell anti-ransomware products and ransomware incident response training btw.

If anybody wonders who Ingram Micro are, they turn over $48 billion a year and have about 20 different business units and brands.

Their network border is dead. Haven’t checked network traffic to see if ransomware yet.

Ingram Micro had network traffic from their ASN to a C2 server used by SafePay ransomware group, for the past week. #threatintel #ransomware
Ingram Micro outage caused by SafePay ransomware attack

An ongoing outage at IT giant Ingram Micro is caused by a SafePay ransomware attack that led to the shutdown of internal systems, BleepingComputer has learned.

BleepingComputer

2 and a bit days in and Ingram Micro still haven’t admitted what is happening, instead saying “Maintenance”

They’re both a large MSP and MSSP who sell anti-ransomware services.

#threatintel #ransomware

There's also several hundred gigabytes of data out of Ingram Micro's network. I suspect they'll have a long running, uhm, maintenance.

Three days in, Ingram Micro have updated their website to say they’re having a cybersecurity incident. They’ve also linked their press release, calling it ransomware. https://www.ingrammicro.com/

It’s a smart play as it makes them the owner of the narrative.

Ingram Micro have filed an 8-K for ransomware.

Some incredible wordsmithing here - rather than say when the incident began, they say when they issued a press release. Which was days later than when the incident began. I think this is because they missed SEC reporting deadlines.

https://www.sec.gov/ix?doc=/Archives/edgar/data/1897762/000162828025034372/ingm-20250705.htm

#ransomware

Ingram Micro are listed on SafePay ransomware group portal. #ransomware
Ingram Micro have restored their cybersecurity website, which had been offline, where they sell anti-ransomware services. The content hasn’t been updated for just over 6 years.
@GossiTheDog I do like their "Security Linecard" for product categorization. https://linecards.ingrammicro.com/security/
Security Line Card

Security Line Card - Discover all the security products and services Ingram Micro has to offer.