Toll Group is continuing to fight the cyber attack, which led to a severe disruption of its services on 31 January 2020. At the same time the company has refused to pay the cyber ransom demanded by hackers.
Toll is treating the situation as a criminal matter, has made no contact with the attackers and has no intention of engaging.
The Australian transportation and logistics company is still working through the process of re-setting back-end IT systems, according to its latest update on 7 February.
“Working closely with our external experts and federal government authorities we have made good progress through this past week to gradually reinstate systems securely,” says Toll Group.
Responding to a Container News request regarding the ransom payment, a Toll Group spokesperson stated:
“The ransom demand did not name a specific figure but provided contact details for Toll to arrange a ransom payment. We’ve made no contact with the attackers and have no intention of engaging. We are treating it as a criminal matter and, as such, have referred it to the relevant authorities.
According to the latest update, over the coming days, and allowing for the inherent complexity of cyber-attacks of this nature, Toll’s focus is on reinstating foundational IT infrastructure, which the company actively disabled at the outset. From there, Toll is conducting comprehensive testing of its key systems.
In the meantime, Toll Group says its business continuity measures are helping to ensure that many of customers can keep accessing its services, and the company is working to support those customers who are experiencing delays or disruption.
“We believe our decision to not submit to the attacker’s demands is the responsible and an appropriate course of action for our business and as a leader in the wider logistics sector – we don’t want to incentivise these sorts of attacks against other businesses,” added the Toll spokesperson.
Antonis Karamalegkos
Editor