FTAPI Confirms Ransomware Incident on Internal Server
Summary
FTAPI confirmed unauthorized access to a locally operated internal server on September 14 and ransomware deployment. It says its platform, customer systems, and exchanged data were unaffected; forensic investigations continue.
Key points
- FTAPI confirmed that an IT security incident was detected on September 14.
- Unauthorized individuals accessed one locally operated internal server and injected ransomware.
- FTAPI immediately isolated affected systems and brought in an external forensics team.
- FTAPI says its platform, customer systems, and data exchanged through it were not affected; it reported no indications of customer-system compromise.
- The company informed customers and partners, met supervisory reporting obligations, and filed a criminal complaint.
- The Gentlemen claimed a breach on its darknet leak site but provided no incident details; FTAPI’s investigation is ongoing.
- FTAPI has not disclosed the entry method, so whether it involved a software vulnerability or stolen credentials remains unclear.
Article Details
- Victim Organization
- FTAPI
- Incident Type
- Unauthorized access to a single locally operated internal server and ransomware injection.
- Incident Date
- 2026-09-14
- Operational Impact
- FTAPI isolated the affected systems immediately. The company said its platform, customer systems, and customer-exchanged data were not affected, and its operations were not restricted. Forensic investigations were ongoing.
- Ransom Or Extortion
- The Gentlemen claimed a breach on its darknet leak site and displayed a countdown, but provided no details. FTAPI confirmed an IT security incident involving ransomware on an internal server; the article does not report a ransom demand or confirmed data theft.
- Claim Status
- confirmed
Threat Actors
Industries
AdministrationThis can be found on the company’s website: It was founded in 2010 and now has more than 2000 companies as customers, with more than one million users from administration, health, and industry working with it.HealthThis can be found on the company’s website: It was founded in 2010 and now has more than 2000 companies as customers, with more than one million users from administration, health, and industry working with it.IndustryThis can be found on the company’s website: It was founded in 2010 and now has more than 2000 companies as customers, with more than one million users from administration, health, and industry working with it.