Tietoevry provides further context and clarity on the ransomware attack in Sweden

On the night of January 19–20 one of Tietoevry’s data centers in Sweden was partially hit by a ransomware attack. Tietoevry sincerely regrets the challenges this criminal attack has caused to our customers, and to many entities and individuals as consequence.

Tietoevry takes security highly seriously and has actively shared information on the attack, the restoration process and the company’s approach on cybersecurity during the past months. As there has recently been speculation and misinformation circulating in the public, the company would like to provide further context and clarity:

• During the years 2022–2023, Tietoevry has invested in total around EUR 100 million in the development of data centers, cybersecurity and resilient IT infrastructure. The investment decisions in the area of cybersecurity are made primarily within Tietoevry’s five specialized businesses.
• The overall security landscape as well as Tietoevry’s own security operations and developments are regularly reviewed, assessed and followed up by the Group Management.
• Tietoevry has 24/7 operations to ensure service availability and rapid response in case of any disruption. In the case of this ransomware attack, Tietoevry’s monitoring detected the suspicious activity, and Tietoevry’s experts were able to stop the attack during the night and limit its impact.
• The foundation for restoration activities, the new platform, was built within 24 hours of the attack. Tietoevry was able to restore over 90% of the affected servers from backups within four days.
• Further restoration of the services progressed in collaboration with the customers in question. With the exception of efforts continuing with few customers, all other impacted customer services were fully restored by mid-March.
• As earlier communicated, Tietoevry’s analysis concluded the most probable path used by the attacker to gain unauthorized access to the data center. Furthermore, Tietoevry has involved credited third-party security experts also in the analysis.
• Tietoevry has official security policies, including access control and password management, adhering to the latest recommendations in the industry. Tietoevry’s operations are also audited by external parties.
• As an IT service provider, Tietoevry is actively engaged with cybersecurity-centric authorities. In this ransomware attack, the company has shared all findings with relevant authorities throughout the process.

Tietoevry’s previous release on the topic can be found here.

###

Tietoevry creates purposeful technology that reinvents the world for good. We are a leading technology company with a strong Nordic heritage and global capabilities. Based on our core values of openness, trust and diversity, we work with our customers to develop digital futures where businesses, societies, and humanity thrive.

Our 24 000 experts globally specialize in cloud, data, and software, serving thousands of enterprise and public-sector customers in more than 90 countries. Tietoevry’s annual turnover is approximately EUR 3 billion and the company’s shares are listed on the NASDAQ exchange in Helsinki and Stockholm, as well as on Oslo Børs. www.tietoevry.com