July 6, 2025 — Ingram Micro has confirmed that a ransomware attack was behind the recent service outage that disrupted its operations late last week. The confirmation follows days of vague references to technical issues, which had affected access to its main site and core online systems.
Sources familiar with the matter said the incident began early Thursday, triggering widespread functionality issues. The company initially avoided sharing any specifics about the root cause and framed the incident as a temporary technical issue.
Recent findings suggest that internal systems were compromised, providing an entry point for malicious payloads believed to be the work of SafePay, a group related to multiple incidents reported earlier this year. Ransom-related messages appeared on impacted systems; however, it remains unclear whether any files were encrypted or if information was removed from the network.
As a precautionary measure, the company asked some employees to work remotely. It also took its GlobalProtect VPN offline, which is believed to have possibly served as the attackers’ point of entry. The disruption didn’t impact external collaboration tools like Microsoft 365, Teams, or SharePoint. Internal systems, including Xvantage and the Impulse licensing platform, experienced operational setbacks.
Although the message from the attackers suggested a possible data compromise, this type of statement has been consistent across prior cases involving the same threat group. At this stage, there is no concrete evidence confirming whether any information was extracted.
On Sunday, the company issued a statement confirming the attack. It stated that it had acted swiftly to contain the threat, shut down impacted systems, and launch an investigation in partnership with cybersecurity specialists. Law enforcement has also been informed.
Ingram Micro has begun recovery procedures. While the company has acknowledged the disruption publicly, they have not released specifics on the breach’s scope or potential data exposure involving partners or customers.
