Cosmetics firm Avon offline after cyber attack

Facets of the UK web residing of Brazilian-owned cosmetics and magnificence firm Avon remain offline bigger than per week after an alleged ransomware attack on its IT programs.

The attack is realizing to hold impacted the again-dwell programs extinct by its eminent sales representatives in just a few countries besides the UK, alongside with Poland and Romania, which could well perchance be now again on-line. This has left of us unable to mumble orders with the firm.

Avon disclosed the breach in a notification to the US Securities and Alternate Fee (SEC) on 9 June 2020, asserting it had suffered a “cyber incident” in its IT atmosphere that had interrupted programs and affected operations.

In a notice-up disclosure on 12 June, Avon mentioned: “Avon … after struggling the cyber incident communicated on 9 June, 2020, is planning to restart about a of its affected programs within the impacted markets throughout the route of next week.

“Avon is persevering with the investigation to decide the extent of the incident, alongside with skill compromised deepest data. Nonetheless, at this level it does now not anticipate that bank card important aspects hold been seemingly affected, as its predominant e-commerce web residing does now not retailer that data.”

In an announcement circulated to the Northampton Echo ­­– Avon’s UK operations are essentially essentially essentially based within the city – the company’s CEO, Angela Cretu, mentioned the attack had supreme partly affected operations, and that the company had now launched an investigation, engaged security forensics groups, and alerted regulations enforcement.

Cretu mentioned Avon’s groups hold been working across the clock to re-effect the affected programs, and that if the firm did verify any activity affecting customer or advisor data, those of us could well perchance be notified and supported.

She added: “The protection and confidentiality of our clients’ data is of essential significance to us and a responsibility we obtain extraordinarily significantly.”

Though extra important aspects of the attack have to now not impending, some early reporting has established that it also can hold been applied by the cyber prison organisation within the again of the DoppelPaymer ransomware stress – even if this has but to be confirmed by the community itself, which, love about a of its peers, maintains an online residing where it leaks important aspects of organisations it has attacked.

“Before all the things blush, this appears to be to be any other cyber attack by hackers which could well perchance be holding Avon programs for ransom,” mentioned Pixel Privacy’s Chris Hauk. “If this does prove to hold been a ransomware attack, it underscores the need for firms love Avon to educate their employees and executives as to the dangers of clicking links and opening attachments in emails and varied communications.

“It desires to be eminent that Avon’s restoration of entry to the cosmetic company’s Poland and Romania again-ends implies that the firm did hold backups of its data, which it’s some distance the exhaust of to restore providers and products. Companies must unexcited constantly hold most up-to-date backups of their data, which is saved damage away their day-to-day programs.”

Computer Weekly contacted Avon for extra important aspects, however had obtained no response on the time of writing.

Read more on Hackers and cybercrime prevention

• 
  

  Insurance company Chubb is prone to be most up-to-date Maze ransomware sufferer

  

  By: Alex Scroxton

• 
  

  Malware unexcited top security menace, order infosec mavens

  

  By: Warwick Ashford

• 
  

  St John Ambulance praised for response to ransomware attack

  

  By: Warwick Ashford

• 
  

  Norsk Hydro urges warning as it counts payment of cyber attack

  

  By: Warwick Ashford