The company said on Tuesday that they had been hit by the ransomware attack which has affected their cloud hosting, email and customer support. Whilst some critical elements of their infrastructure have been restored by Wednesday, it will take longer to get customer systems back up and running.
ActiveCloud said on Friday that they have now restored their core services, however some customers are still having issues.
They added that their technical teams have been working around the clock to get everything back up and running and the most difficult part of the recovery process is now complete.
The ransomware attack has impacted a number of services including their core cloud hosting product E-Cloud, secure hosting E-Cloud Protected and their business email SmartMail. Some customers also had issues getting their virtual machines running.
ActiveCloud said that during their investigation they have found no evidence that customer data has been compromised. They have not said how the attackers gained access to their systems.
The ransomware attack has impacted organisations using ActiveCloud. Belarus news organisation Smartpress have confirmed that they use ActiveCloud to host their website, however they are still publishing. Domino’s Pizza website and mobile app in Belarus have also had some downtime due to the issues.
ActiveCloud provide cloud hosting, virtual servers, business email and other IT services to businesses and organisations in Belarus and Russia. This means that when issues occur with these services, a number of customers can be impacted.
The attack comes after a number of incidents targeting hosting companies in Belarus and neighbouring Russia. On November 8, Russian hosting provider ESTT were hit by a ransomware attack which impacted their cloud services. This caused issues with websites, virtual servers and other customer services.
They said that whilst their cloud management systems had been targeted, there was no evidence that customer data had been compromised.
Just days earlier another Russian provider Beget fell victim to a destructive cyber attack. Attackers reportedly gained access to their infrastructure management systems and ran scripts to wipe data from some areas of their cloud.
This caused issues with websites and online services for businesses, media and government. They also said that some of their virtual servers had been lost meaning it was harder to get everything back up and running.
There is no confirmed evidence linking the attacks on ActiveCloud, ESTT and Beget. None of the companies have identified who is responsible.
