July 27, 2022

Email provider WordFly under ransomware attack, website offline

A ransomware operation has not only taken down WordFly, a mailing list provider for top arts firms among others, but also exposed information belonging to the US-based Smithsonian, Canada's Toronto Symphony Orchestra, and the Courtauld Institute of Art in London.

As of right now, WordFly's main site is unavailable, and has been offline for the past two weeks:

Please plan accordingly if you need to send email before Aug. 1.

WordFly is one of those companies that takes care of sending out mass emails, typically marketing messages, to customers who sign up for said bumf.

In an update about the ongoing outage, WordFly exec Kirk Bentley said the outfit's engineering team discovered a network disruption on July 10. "The incident was propagated by a bad actor who conducted a ransomware attack on WordFly, resulting in the encryption of the WordFly application," he wrote in a support note:

During said attack, miscreants stole customers' email addresses and "other data" used by those organizations to communicate with their fans via WordFly. Kirk Bentley added:

At this time, we believe that the exported data was not sensitive in nature and largely consisted of names and email addresses.

The other day, the popular music platform Audius was breached. Hackers stolen over 18 million AUDIO tokens worth nearly $6 million.