United States
USA
WordFly ransomware takes arts-sector email communications platform offline
On July 10, 2022, ransomware encrypted the WordFly application and disabled its email-marketing service. The platform remained unavailable for more than two weeks, preventing arts institutions including the Royal Opera House, Belvoir St Theatre and the Toronto Symphony Orchestra from communicating with audiences through WordFly; customers used alternate mailing services or delayed messages. Customer contact data was also reportedly exported.
83
Estimated severity
83 / 100
95
Source reliability
95 / 100
Approximate Date
2022-07-10
Targeted Company
WORDFLY
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
BELVOIR ST THEATRE (Digital platform provider)ROYAL OPERA HOUSE (Digital platform provider)TORONTO SYMPHONY ORCHESTRA (Digital platform provider)
Geographic Impact
Country Targeted Company
Other Affected Countries
Australia
AUS
Canada
CAN
United Kingdom
GBR
Target country
United States
Affected countries
AustraliaCanadaUnited KingdomUnited States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionService unavailability
Affected sectors
Media & EntertainmentTechnology & IT Services
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Data exfiltrationRansomware
Attributed threat actors
No information
Sources
Incident Sources
theregister.comhttps://www.theregister.com/security/2022/07/26/ransomware-gang-raids-email-list-provider-wordfly/575225rbo.org.ukhttps://www.rbo.org.uk/news/contact-with-our-customerssecurityweek.comhttps://www.securityweek.com/mailing-list-provider-wordfly-scrambling-recover-following-ransomware-attack/belvoir.com.auhttps://belvoir.com.au/posts/2022/07/20/email-marketing/nationalzoo.si.eduhttps://nationalzoo.si.edu/news/smithsonian-statement-wordfly-data-security-incident