The American branch of Xerox Business Solutions (XBS) suffered a ransomware attack just before the new year in which hackers stole sensitive information, but the incident is not believed to have disrupted the company's activities.
A report from BleepingComputer noticed XBS being added to the INC Ransom threat actor data breach site and contacted the company, which issued the following statement:
“Recently, Xerox's subsidiary, Xerox Business Solutions, experienced a security incident that was detected and contained by Xerox cybersecurity personnel. The event was limited to XBS US. We are actively working with external cybersecurity experts to conduct a thorough investigation into this incident and are taking the necessary steps to further secure the XBS IT environment.”
Added and then removed from the data breach site
The statement, later published to the Xerox newsroom site, further states that the incident did not impact the company's business systems, operations or data. It had no effect on XBS business, the company added. “However, our preliminary investigation shows that there may be limited personal information in the XBS environment. As per our policy and standard operating procedure, we will notify all affected individuals as appropriate.”
On the data breach site, INC Ransom said the stolen information includes email communications (both addresses and the contents of the emails), payment information, invoices, completed application forms, and purchase orders. Although it is unclear whose data this is, media speculate that it may include customers, partners and employees.
Shortly afterwards, INC Ransom removed XBS from its website, which could mean the company either paid the ransom demand or continued negotiations.
XBS provides document technology and services, including printers, copiers, digital printing systems and similar products and services. Last year, the company posted revenues of $1.94 billion, up 9.2% year over year, or up 13.9% at constant exchange rates.