Belarusian hosting provider ActiveCloud said its main services were restored on Friday, November 13, after a ransomware attack disrupted business websites, email and virtual servers. Some customers were still experiencing recovery problems, The Record reported.
The company first disclosed the attack on Tuesday. According to the report, intruders encrypted parts of its cloud infrastructure, interrupting access to hosting, corporate email and support channels. Friday’s announcement marked progress in recovery rather than the start of a new incident.
ActiveCloud said its investigation had found no evidence of customer data theft. That statement describes the company’s findings at that point; it does not establish that data could not have been taken.
The provider had not identified the attackers or explained their initial access method. It also warned that some customers could still face difficulties restoring virtual machines.
For affected businesses, a provider’s overall restoration announcement still leaves an individual check: whether their own services and workloads have recovered.
Illustrative image: Getty Images via Unsplash.
