Starbucks has gone back to pen and paper after a ransomware attack from suppliers
- Starbucks stores are using pen and paper to track employee hours after the attack
- Third-party supplier Blue Yonder hit by ransomware attack
- Stores in Britain and the US have been affected
Starbucks may be the largest coffee chain in the world, but many of its stores have been forced to manually track employee schedules and payrolls after a third-party supply chain supplier was hit by a ransomware attack.
Blue Yonder confirmed that it was the victim of a ransomware attack and that services remain severely disrupted. The company confirmed it was “working around the clock to respond to this incident.”
The list of affected stores is growing, with British retail giants Sainsbury’s and Morrisons both also reporting disruptions. The stores have confirmed that backup processes and contingency plans are in place, so the impact on customers should be minimal.
Third Party Risks
It is not yet clear exactly what the effects of the hack will be and the extent of the disruption remains to be seen. Ransomware is a costly proposition, with an average demand of over $5 million in the first half of 2024.
Ransomware attacks are on the rise around the world, and increasing digital activity has left many companies dependent on third-party vendors, which can put businesses at risk even if their own cybersecurity is watertight.
Risks can be mitigated by thoroughly assessing third-party suppliers and ensuring contingency plans are in place. CISOs are encouraged to collaborate with their industry peers to maintain strong relationships.
“The Blue Yonder incident is a reminder to all organizations that focusing solely on the security and resilience of systems under your direct control is no longer an option.” said Matt Aldridge, Principal Solutions Consultant at OpenText Cybersecurity.
“Dependencies run deep and wide throughout the supply chain, so it is essential that all suppliers are thoroughly vetted on an ongoing basis and that contingency plans are in place before a major third-party solution goes live.”
Via CNN
