United States
USA
Lumen discloses ransomware and separate intrusion
On 27/03/2023, Lumen reported two incidents: a ransomware infection on a limited number of servers supporting a segmented hosting service that degraded operations for a small number of enterprise customers, and a separate intrusion into internal IT systems where a sophisticated actor conducted reconnaissance, installed malware and exfiltrated a limited amount of data.
60
Estimated severity
60 / 100
85
Source reliability
85 / 100
Approximate Date
27/03/2023
Targeted Company
LUMEN TECHNOLOGIES
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Service degradation
Affected sectors
TelecommunicationsTechnology & IT Services
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareMalwareUnauthorized accessData exfiltration
Attributed threat actors
No information
Sources
Incident Sources
securityweek.comhttps://www.securityweek.com/lumen-technologies-hit-by-two-cyberattackscybersecuritydive.comhttps://www.cybersecuritydive.com/news/lumen-ransomware-attack/646135lightreading.comhttps://www.lightreading.com/security/lumen-hackedsecurityaffairs.comhttps://securityaffairs.com/144113/hacking/lumen-suffered-ransomware-attack.htmlicsstrive.comhttps://icsstrive.com/incident/lumen-hit-by-separate-ransomware-malware-attacks