United States
USA
UKG Kronos ransomware disables timekeeping and payroll cloud services
On 11 December 2021, UKG detected ransomware affecting its Kronos Private Cloud environment, making hosted timekeeping, staffing and payroll services unavailable for weeks. Directly impacted customers including George Washington University, UMass Memorial Health and Care New England used manual timekeeping or payroll workarounds, with documented payroll difficulties. UKG stated that core affected services were restored across customers by 22 January 2022.
90
Estimated severity
90 / 100
97
Source reliability
97 / 100
Approximate Date
2021-12-11
Targeted Company
UKG
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
CARE NEW ENGLAND HEALTH SYSTEM (Software vendor)GEORGE WASHINGTON UNIVERSITY (Software vendor)UMASS MEMORIAL HEALTH (Software vendor)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
42 days
Financial impact (USD M)
No information
Impact types
Downstream customer disruptionOperational disruptionService unavailability
Affected sectors
Technology & IT Services
Affected departments
Customer ServiceInformation Technology
Attack Profile
Attack types
Ransomware
Attributed threat actors
No information
Sources
Incident Sources
aha.orghttps://www.aha.org/h-isac-reports/2021-12-13-h-isac-tlp-white-kronos-private-cloud-kpc-ransomware-incident-causesstatus.gwu.eduhttps://status.gwu.edu/incidents/329574hrdive.comhttps://www.hrdive.com/news/the-kronos-outage-disrupted-UMass-Memorial-Health-health-payroll-for-more-than-a-month/620652/techtarget.comhttps://www.techtarget.com/enterprise-software/news/252511761/Users-hit-by-Kronos-payroll-ransomware-await-recoveryshrm.orghttps://www.shrm.org/topics-tools/news/technology/concerns-linger-following-ukg-ransomware-attack