F-one: ransomware attack

Encryption and a ransom note discovered on January 30 were disclosed on February 4. The April final report found unauthorized VPN connections on January 26 and 28 and compromised administrator privileges. F-one concluded that about 170,000 personal records leaked, although retained logs could not establish outbound transfer and some logs were lost or encrypted. The count may include duplicate people. Card data was not held.