Endless: LockBit enters through a test account the installer left behind

On 23 April 2024 Endless, which runs bead and accessory shops, announced that its head office server had been infected with LockBit ransomware. It said the direct cause was a "test" account that Startia, which it had hired the year before to install a FortiGate appliance, used during the installation and never deleted; an outsider used that account to get into the server. No leak of internal data had been confirmed, and the affected server held no customer data.