CyrusOne Data Center Faces REvil Ransomware Attack: What It Means for the Industry

The Cyber Attack Unveiled

In an alarming turn of events, Texas-based data center giant CyrusOne has reportedly found itself on the receiving end of a REvil (Sodinokibi) ransomware attack. As noted by tech behemoth ZDNet, this incident has raised eyebrows across the tech landscape, especially given CyrusOne’s stature as one of the largest data providers in the United States.

The Scope of the Incident

In a recent communication with Cointelegraph, CyrusOne revealed that six of its managed service customers, primarily using their New York data center, faced significant availability issues. This was attributed to a ransomware program encrypting certain devices within their network. Thankfully, the data center’s colocation services, including IX and IP Network Services, reportedly remain unaffected, which is a small blessing amid the chaos.

CyrusOne’s Response

In a bid to mitigate fears, the firm confirmed that they are actively working with law enforcement to address the situation. The company stated, “We are taking every step necessary to resolve this issue, and the colocation services our clients rely on are secure.” That’s a relief, isn’t it? Imagine trying to explain to your boss why the internet is down because of a ransomware attack. Talk about a Monday morning meeting!

Ransomware: Just Business?

The ransom note disclosed by ZDNet adds a striking perspective to this ordeal. The attackers implied that they see this breach not as a crime but simply as a business transaction. They’ve positioned themselves as mercenaries of the cyber realm, with profit as their only compass. However, it raises a moral question: when a hacker states they’re in it for the business, does it make their actions more acceptable? Spoiler alert: It doesn’t.

To Pay or Not to Pay?

The question of whether to negotiate with cybercriminals continues to polarize opinions. Take for instance the city of Riviera Beach, Florida, which opted to pay a staggering $600,000 in Bitcoin (BTC) to recover access to critical government records. On the flip side, Johannesburg city officials held steadfast against cyber blackmail, refusing to pay up, leading to significant operational disruptions. So, what should CyrusOne do? At this point, they, like others, must weigh their options carefully.

Learning from the Past

The frequency of these attacks has prompted numerous municipalities, including several Finnish cities, to conduct simulations on how to respond to demands from hackers. This proactive approach is critical in ensuring resilience against future threats—because let’s face it, the ever-elusive cybercriminals are only getting bolder.