United States
USA
Shutterfly ransomware interrupts manufacturing and selected photography services
Shutterfly later disclosed that attackers obtained network access around 3 December 2021, with the incident detected on 13 December. The ransomware attack encrypted some systems and interrupted manufacturing and parts of the Lifetouch, BorrowLenses and Groovebook businesses, as confirmed by the company on 26 December. Shutterfly.com, Snapfish, TinyPrints and Spoonflower websites remained unaffected. The precise onset and duration of the operational interruptions were not disclosed.
80
Estimated severity
80 / 100
97
Source reliability
97 / 100
Approximate Date
2021-12-03
Targeted Company
SHUTTERFLY
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionProduction interruptionService degradation
Affected sectors
ManufacturingRetail
Affected departments
Information TechnologyProduction & Manufacturing
Attack Profile
Attack types
Ransomware
Attributed threat actors
CONTI
Sources
Incident Sources
oag.ca.govhttps://oag.ca.gov/system/files/CA%20Shutterfly%20Sample%20Individual%20Notification%20Letter.pdfshutterflyinc.comhttps://shutterflyinc.com/statement-about-cybersecurity-incident/securityweek.comhttps://www.securityweek.com/shutterfly-says-ransomware-attack-impacted-manufacturing/cyberscoop.comhttps://cyberscoop.com/shutterfly-ransomware-conti/bleepingcomputer.comhttps://www.bleepingcomputer.com/news/security/shutterfly-services-disrupted-by-conti-ransomware-attack/amp/