Itac says it was targeted in ransomware attack in January
The International Trade Administration Commission says criminals accessed Itac’s files and locked users out of the system
15 April 2024 - 15:30
byKhulekani Magubane
Support our award-winning journalism. The Premium package (digital only) is R30 for the first month and thereafter you pay R129 p/m now ad-free for all subscribers.
The International Trade Administration Commission (Itac) said on Monday that it experienced a cybersecurity attack at the beginning of 2024, when its files were encrypted and users were locked out of the system.
Itac said on Monday the ransomware attack happened on January 2. Ransomware is malicious software designed to block a user’s access to an information system until money is paid to allow access again.
“Itac suffered a ransomware attack in which malicious actors encrypted Itac’s files and locked users out of the system and demanded a ransom payment in exchange for restoring access or decrypting their files,” the commission said.
It delayed publishing the notice because of the need for an investigation into the attack and to restore the integrity of its information systems.
“It was considered vital not to pre-empt the investigation initiated after Itac became aware of the compromise. The type of information held on Itac’s servers includes personal information relating to Itac’s employees, service providers, importers, exporters and other stakeholders.”
Itac said after it was made aware of the attack it took steps to contain the fallout by shutting down affected servers, upgrading its firewall and antivirus measures and commissioning a forensic probe.
“We will continue to enhance data privacy and protection measures such as implementing and increasing encryption and multi-factor authentication and any additional technological measures our forensic service provider recommends to address new risks to personal information.”
Itac said there was a chance the compromise may have affected stakeholders and the hacker may have accessed, and extracted, personal information stakeholders submitted to Itac.
The commission urged stakeholders to remain vigilant.
Support our award-winning journalism. The Premium package (digital only) is R30 for the first month and thereafter you pay R129 p/m now ad-free for all subscribers.
Itac says it was targeted in ransomware attack in January
The International Trade Administration Commission says criminals accessed Itac’s files and locked users out of the system
The International Trade Administration Commission (Itac) said on Monday that it experienced a cybersecurity attack at the beginning of 2024, when its files were encrypted and users were locked out of the system.
Itac said on Monday the ransomware attack happened on January 2. Ransomware is malicious software designed to block a user’s access to an information system until money is paid to allow access again.
“Itac suffered a ransomware attack in which malicious actors encrypted Itac’s files and locked users out of the system and demanded a ransom payment in exchange for restoring access or decrypting their files,” the commission said.
It delayed publishing the notice because of the need for an investigation into the attack and to restore the integrity of its information systems.
“It was considered vital not to pre-empt the investigation initiated after Itac became aware of the compromise. The type of information held on Itac’s servers includes personal information relating to Itac’s employees, service providers, importers, exporters and other stakeholders.”
Itac said after it was made aware of the attack it took steps to contain the fallout by shutting down affected servers, upgrading its firewall and antivirus measures and commissioning a forensic probe.
“We will continue to enhance data privacy and protection measures such as implementing and increasing encryption and multi-factor authentication and any additional technological measures our forensic service provider recommends to address new risks to personal information.”
Itac said there was a chance the compromise may have affected stakeholders and the hacker may have accessed, and extracted, personal information stakeholders submitted to Itac.
The commission urged stakeholders to remain vigilant.
TimesLIVE
MPs pass law to reverse Zuma era’s ‘intelligence evils’
SCOTT TIMCKE: Dirty data tricks could undermine SA’s election integrity
Leading AI firms join US safety consortium
Google calls out spyware firms as hacking tools proliferate
Australia sanctions ‘coward and scumbag’ Russian hacker
Would you like to comment on this article?
Sign up (it's quick and free) or sign in now.
Please read our Comment Policy before commenting.
Most Read
Related Articles
SCOTT TIMCKE: Neglected cybersecurity puts development at risk
New Zealand slams China over parliament hacking
UK to detail Chinese cybersecurity threat
KATE THOMPSON DAVY: Cyberattack on state agency puts treasure trove of data at ...
Hackers demand $60m from TransUnion and Experian, claiming data theft
North Korea deploying remote IT workforce
Ransomware attack on ICBC hits US treasury market trades
Published by Arena Holdings and distributed with the Financial Mail on the last Thursday of every month except December and January.