Security News > 2021 > March > Payroll giant PrismHR outage likely caused by ransomware attack

Leading payroll company PrismHR is suffering a massive outage after suffering a cyberattack this weekend that looks like a ransomware attack from conversations with customers.
In email templates provided by PrismHR, PEOs are telling clients that PrismHR "Is currently experiencing an interruption of service impacting over 200 PEOs across the United States."
PrismHR has told customers that their data was not stolen during the attack.
"We recently experienced a cyber incident that affected our payroll and benefits software used by Professional Employer Organizations throughout the US. We immediately disabled access to the system to protect customer information and engaged top-tier security experts to help on this. We are working quickly to restore customer access to our platform. While we are still looking into this, there is currently no evidence of unauthorized access or theft of data contained on our servers." - PrismHR. Likely a ransomware attack.
While PrismHR has not specified what kind of cyber incident was detected, from the details shared with BleepingComputer, this is likely a ransomware attack.
While PrismHR has told clients that there has not been a breach of data and that payroll is secure, we will not know for sure unless the ransomware gangs leak the data.
News URL
Related news
- Kettering Health hit by system-wide outage after ransomware attack (source)
- MATLAB dev confirms ransomware attack behind service outage (source)
- Sensata Technologies hit by ransomware attack impacting operations (source)
- Ransomware attack cost IKEA operator in Eastern Europe $23 million (source)
- Kidney dialysis firm DaVita hit by weekend ransomware attack (source)
- Ahold Delhaize confirms data theft after INC ransomware claims attack (source)
- Interlock ransomware gang pushes fake IT tools in ClickFix attacks (source)
- Interlock ransomware claims DaVita attack, leaks stolen data (source)
- Ransomware attacks are getting smarter, harder to stop (source)
- Hitachi Vantara takes servers offline after Akira ransomware attack (source)