Â鶹ӰÊÓ

Skip to main content

Timeline of the ransomware attack against Canadian bookstore retailer Indigo

Share
TORONTO -

It's been one month since a ransomware attack hit Canada's biggest bookstore chain.

The hack kicked Indigo Books & Music Inc.'s website and payment systems offline and compromised the personal information of some current and former employees.

Here's a timeline of the cyberattack:

Feb. 8: In a post on Twitter at 2:15 p.m. ET, Indigo says the company is experiencing "technical issues" and its website isn't available. The retailer says its stores are open, but for cash transactions only. At 7:26 p.m. ET, the company shares an update saying it had experienced a cybersecurity incident and is working with third-party experts to investigate and resolve the situation.

Feb. 10: Indigo says it's continuing to investigate whether any data was breached during the cyberattack. The company says it can once again accept debit and credit cards in stores, but still cannot process gift cards or returns. Indigo says customers should not log into any website that claims to be Indigo or for Plum rewards. The retailer suggests customers monitor accounts and avoid clicking on suspicious emails or links.

Feb. 14: The bookstore chain says customer credit and debit information was not stolen during the cyberattack, as it does not store the full numbers in its system. Plum reward points were also unaffected by the breach, Indigo says. Its website remains down on Valentine's Day, a key retail event during the typically sluggish winter months.

Feb. 17: Indigo says its investigation has found no indication that customer data was compromised by the cybersecurity incident. The company says its stores can now accept returns and exchanges, and its return policy has been extended for some cases. The retailer also unveils a new, browsable-only temporary online home.

Feb. 22: Indigo announces that customers are now able to make purchases of "select books" online and browse other products.

Feb. 24: Indigo says the data of current and former employees was stolen in a ransomware attack. In a statement on its website, the Toronto-based company says it has contracted consumer reporting agency TransUnion of Canada to offer two years of credit monitoring.

March 1: The company announces that it has decided not to pay the ransom in the cyberattack. Indigo says its network was hijacked via a ransomware software known as LockBit. The retailer says it does not know the identity of those behind the attack, but says LockBit has been used by Russian organized crime groups, and it cannot be assured that any ransom payment would not end up in the hands of terrorists or others on sanctions lists.

March 2: The company says the criminals responsible for the attack intend to make some or all of the data they have stolen available using the "dark web" as early as March 2. The company says it's continuing to work closely with Canadian police services and the FBI in the United States in response to the attack.

March 8: The company's website appears to be back, although a notice suggests that the online inventory is in the process of being updated. It is still recommended that consumers contact local stores to ensure a specific product is in stock and available for purchase.

This report by The Canadian Press was first published March 8, 2023.

CTVNews.ca Top Stories

A 21-year-old man who was charged with attempted murder in the shooting of a Toronto police officer this week was out on bail at the time of the alleged offence, court documents obtained by Â鶹ӰÊÓ Toronto show.

DEVELOPING

DEVELOPING

At least two people are dead and others are injured after a fire ripped through a century-old building near Montreal's City Hall, sources told Noovo Info.

Three pit bulls involved in a deadly attack on another dog last month in Kamloops, B.C., tested positive for methamphetamine and cocaine, and the city is going to court to have them put down.

Local Spotlight

Chantal Kreviazuk is set to return to Winnipeg to mark a major milestone in her illustrious musical career.

From the beaches of Cannes to the bustling streets of New York City, a new film by a trio of Manitoba directors has toured the international film festival circuit to much pomp and circumstance.

A husband and wife have been on the road trip of a lifetime and have decided to stop in Saskatchewan for the winter.

The grave of a previously unknown Canadian soldier has been identified as a man from Hayfield, Man. who fought in the First World War.

A group of classic car enthusiasts donated hundreds of blankets to nursing homes in Nova Scotia.

Moving into the second week of October, the eastern half of Canada can expect some brisker fall air to break down from the north

What does New Westminster's təməsew̓txʷ Aquatic and Community Centre have in common with a historic 68,000-seat stadium in Beijing, an NFL stadium and the aquatics venue for the Paris Olympics? They've all been named among the world's most beautiful sports venues for 2024.

The last living member of the legendary Vancouver Asahi baseball team, Kaye Kaminishi, died on Saturday, Sept. 28, surrounded by family. He was 102 years old.

New data from Greater Vancouver and the Fraser Valley shows a surge in supply and drop in demand in the region's historically hot real estate market.

Stay Connected