麻豆影视

Skip to main content

Timeline of the ransomware attack against Canadian bookstore retailer Indigo

Share
TORONTO -

It's been one month since a ransomware attack hit Canada's biggest bookstore chain.

The hack kicked Indigo Books & Music Inc.'s website and payment systems offline and compromised the personal information of some current and former employees.

Here's a timeline of the cyberattack:

Feb. 8: In a post on Twitter at 2:15 p.m. ET, Indigo says the company is experiencing "technical issues" and its website isn't available. The retailer says its stores are open, but for cash transactions only. At 7:26 p.m. ET, the company shares an update saying it had experienced a cybersecurity incident and is working with third-party experts to investigate and resolve the situation.

Feb. 10: Indigo says it's continuing to investigate whether any data was breached during the cyberattack. The company says it can once again accept debit and credit cards in stores, but still cannot process gift cards or returns. Indigo says customers should not log into any website that claims to be Indigo or for Plum rewards. The retailer suggests customers monitor accounts and avoid clicking on suspicious emails or links.

Feb. 14: The bookstore chain says customer credit and debit information was not stolen during the cyberattack, as it does not store the full numbers in its system. Plum reward points were also unaffected by the breach, Indigo says. Its website remains down on Valentine's Day, a key retail event during the typically sluggish winter months.

Feb. 17: Indigo says its investigation has found no indication that customer data was compromised by the cybersecurity incident. The company says its stores can now accept returns and exchanges, and its return policy has been extended for some cases. The retailer also unveils a new, browsable-only temporary online home.

Feb. 22: Indigo announces that customers are now able to make purchases of "select books" online and browse other products.

Feb. 24: Indigo says the data of current and former employees was stolen in a ransomware attack. In a statement on its website, the Toronto-based company says it has contracted consumer reporting agency TransUnion of Canada to offer two years of credit monitoring.

March 1: The company announces that it has decided not to pay the ransom in the cyberattack. Indigo says its network was hijacked via a ransomware software known as LockBit. The retailer says it does not know the identity of those behind the attack, but says LockBit has been used by Russian organized crime groups, and it cannot be assured that any ransom payment would not end up in the hands of terrorists or others on sanctions lists.

March 2: The company says the criminals responsible for the attack intend to make some or all of the data they have stolen available using the "dark web" as early as March 2. The company says it's continuing to work closely with Canadian police services and the FBI in the United States in response to the attack.

March 8: The company's website appears to be back, although a notice suggests that the online inventory is in the process of being updated. It is still recommended that consumers contact local stores to ensure a specific product is in stock and available for purchase.

This report by The Canadian Press was first published March 8, 2023.

CTVNews.ca Top Stories

Why brain aging can vary dramatically between people

Researchers are uncovering deeper insights into how the human brain ages and what factors may be tied to healthier cognitive aging, including exercising, avoiding tobacco, speaking a second language or even playing a musical instrument.

The union representing some 1,200 dockworkers at the Port of Montreal has overwhelmingly rejected a deal with their employers association.

A man who was critically injured in a police-involved shooting in Hamilton late Sunday afternoon has died in hospital, says the province鈥檚 police watchdog.

opinion

opinion How to transition from renting to owning a home in Canada

In his column for CTVNews.ca, personal finance contributor Christopher Liew offers a step-by-step guide on how to make the shift from renting to becoming a homeowner, and what you can start doing today to help the process go smoother.

Prime Minister Justin Trudeau announced voters in Cloverdale鈥擫angley City will pick their next member of Parliament on Dec. 16.

Local Spotlight

For the second year in a row, the 鈥楪ift-a-Family鈥 campaign is hoping to make the holidays happier for children and families in need throughout Barrie.

Some of the most prolific photographers behind CTV Skywatch Pics of the Day use the medium for fun, therapy, and connection.

A young family from Codroy Valley, N.L., is happy to be on land and resting with their newborn daughter, Miley, after an overwhelming, yet exciting experience at sea.

As Connor Nijsse prepared to remove some old drywall during his garage renovation, he feared the worst.

A group of women in Chester, N.S., has been busy on the weekends making quilts 鈥 not for themselves, but for those in need.

A Vancouver artist whose streetside singing led to a chance encounter with one of the world's biggest musicians is encouraging aspiring performers to try their hand at busking.

Ten-thousand hand-knit poppies were taken from the Sanctuary Arts Centre and displayed on the fence surrounding the Dartmouth Cenotaph on Monday.

A Vancouver man is saying goodbye to his nine-to-five and embarking on a road trip from the Canadian Arctic to Antarctica.

Stay Connected