Ransomware Attack on Payroll Company

Ransomware AttackThe HR and payroll software Kronos was hit by a ransomware attack over the weekend. The parent company UKG said Monday it may take several weeks for the HR tools to return to normal. Kronos Workforce Central is a suite of software tools used to manage employees including scheduling, clock in/ out, attendance, and payroll. Some businesses are already raising the concern that they may not be able to pay employees until the tools come back online.

Kronos is used by tens of thousands of organizations including half the Fortune 1000. The high-profile HR management tool is used by many city governments including the City of Cleveland. Other customers of the software suite are universities, hospitals, Tesla, and the MTA in New York City.

“UKG recently noticed a ransomware incident that disrupted the Kronos private cloud, which houses a solution used by a limited number of customers. We take immediate action to investigate and mitigate the problem. Wake up, warn affected customers, notify authorities and work with leading cyber security experts. We are aware of the seriousness of the problem and support our customers. We are mobilizing all available resources and working hard to restore the affected services.“ the company said.

Beyond the headache of finding an alternative scheduling solution, and the possibility of not being able to pay employees around the holidays is the concern of compromised employee data. The City of Cleveland released information from the parent company that employee PII may have been compromised. UKG informed the city Monday that the attack may have compromised employees’ first and last names, addresses, last four social security digits, and employee ID.

For more information about how criminals are using ransomed data including employee PII, watch our podcast on The Triple Threat of Ransomware.

Quanexus IT Support Services for Dayton and Cincinnati

Request your free network assessment today. There is no hassle, or obligation.

If you would like more information, contact us here or call 937.885.7272.

Follow us on FacebookTwitter and LinkedIn and stay up to date on by subscribing to our email list.

Posted by Charles Wright