Ransomware attack on Belarusian cloud firm disrupts businesses for days - The Record from Recorded Future News

The company said hackers had breached its systems and encrypted parts of its cloud infrastructure, leaving customers unable to access key services. ActiveCloud first disclosed the attack Tuesday and reported that by Wednesday, it had restored key parts of its infrastructure but bringing all customer systems back online would take longer than initially expected.

Among those affected was the Belarusian news outlet Smartpress, which confirmed its website was hosted on ActiveCloud's infrastructure. The outlet continued publishing despite the disruption. The website and mobile app of Domino's Pizza in Belarus also experienced temporary outages linked to technical problems.

Service Disruption

ActiveCloud provides cloud hosting, virtual servers, corporate email and other IT infrastructure services to businesses and organizations in Belarus and Russia. The attack affected several of its products, including E-Cloud, its main cloud hosting platform; E-Cloud Protected, a service offering additional security protections; and SmartMail, its corporate email service.

Regional Pattern

The incident is the latest cyberattack targeting hosting providers in Belarus and neighboring Russia in recent weeks. On November 8, Russian hosting company ESTT faced a ransomware attack that disrupted its cloud infrastructure. Days earlier, another Russian hosting provider, Beget, suffered a destructive cyberattack in which hackers gained access to infrastructure management systems and deployed scripts that wiped data from parts of its cloud environment.

There is no publicly confirmed evidence linking the attacks on ActiveCloud, ESTT and Beget, and none of the companies has identified those responsible. ActiveCloud said its investigation had found no evidence that customer data had been stolen during the attack.