IT expert on hacker attack against Tietoevry: Can take weeks

Among other things, Filmstaden has been hit hard by a hacker attack.
And it may take some time before everything works again.
– In the absolute worst case, it can take weeks to remedy, says IT security expert Anders Nilsson to TT.

The attack against one of the IT provider Tietoevry’s data centers in Sweden affects the services for a number of customers. The sales systems have, for example, crashed at Filmstaden, Rusta and Granngården.

– They are affected by a ransomware attack, an extortion thing that has encrypted everything, says Anders Nilsson at the security company Eset Nordics.

The extent and whether the information is stolen or just encrypted is unknown.

– What must happen is to first find out how the attackers got in, make sure they are not still in the systems, haven’t left any back doors, and then restore everything from backup copies, which hopefully are still there, says Anders Nilsson.

How long can it take to fix?

– It is very different. I don’t think it’s done in just one day. In the absolute worst case, it can take weeks. I suspect the biggest customers will get theirs back first, but that depends on how much can be recovered from Tieto’s system.

Is it something the affected companies can do themselves?

– Probably not. All the data has probably been with Tieto. Some may have their own copies, but it’s probably still difficult to set up your own systems for that.

The police also had IT problems on Saturday, which affected the publication system on the authority’s website. Whether there is any connection is unclear.

Update 18.40

From 5:30 p.m., you can pay with Swish at Filmstaden.

t4-general