VIAX: its attendance server was hit by ransomware and data of up to 6,841 employees and dependents was encrypted

1. 2022-04-01

   At about 22:10 the server of its attendance and payroll system came under attack. [1] [2]

2. 2022-04-02

   At 8:15 a.m. it received word that the attendance system could not be accessed, and found that all user data on the server had been encrypted by ransomware. [1] [2]

3. 2022-06-01

   It announced the case. [1] [2]

Names, addresses, attendance data and paid salary data of up to 6,841 employees and dependents were affected. No customer or partner personal data was involved, and there was no secondary damage. The web server of the attendance system allowed remote desktop connection from outside during maintenance, and the password was probably guessed by brute force. [1]