Progressive Computing Shares Lessons From the Kaseya VSA Ransomware Attack

Summary

Progressive Computing says the 2021 Kaseya VSA attack deployed ransomware across 2,500 endpoints at 80 clients. Its COO shared lessons for MSPs, including preparing an incident response plan, contacting cyber liability insurance, and seeking peer support.

Key points

• The July 2021 attack on Kaseya VSA affected Progressive Computing, which reported ransomware across 2,500 endpoints at 80 clients and 200 physical sites.
• The article attributes the broader attack to REvil and says it spread from MSPs to between 800 and 1,500 businesses worldwide.
• Progressive Computing’s COO said the company had no formal incident response plan when the attack occurred.
• The article recommends that MSPs prepare an incident response plan and contact their cyber liability insurance provider during an attack.
• The company’s experience prompted the creation of a Volunteer Response Corps for MSPs to support peers during emergencies.

People

Threat Actors

Malware

Products

Industries

Related Articles

• Talos Q3 2021 Report: Ransomware Dominated Incident Response EngagementsREvil · Kaseya VSA
• Ransomware Activity Rebounds After Ukraine Invasion, DarkOwl ReportsREvil
• DarkOwl Roundup Profiles Emerging Ransomware Groups Operating on the DarknetREvil
• REvil Victim Claims Raise Questions About Ransomware Targeting of Military-Linked SuppliersREvil
• ClickFix Campaign Uses ActiveX to Deliver Epsilon Red RansomwareREvil