Widespread outages across Ingram Micro’s website and portal allegedly started at 9pm on Thursday 3 July 2025.
On Sunday 6 July (Jul 5, 2025 10:07 PM EDT), Ingram Micro released the following statement to the press:
Ingram Micro recently identified ransomware on certain of its internal systems. Promptly after learning of the issue, the Company took steps to secure the relevant environment, including proactively taking certain systems offline and implementing other mitigation measures. The Company also launched an investigation with the assistance of leading cybersecurity experts and notified law enforcement.
Ingram Micro is working diligently to restore the affected systems so that it can process and ship orders, and the Company apologizes for any disruption this issue is causing its customers, vendor partners, and others.
According to Bleeping Computer, Palo Alto Networks have also made a statement, however no spokesperson has been attributed to the comment, and to date Palo Alto Networks have not issued a press statement. The following statement appears on Bleeping Computer’s article dated 7/7/25:
“At Palo Alto Networks, the security of our customers is our top priority. We are aware of a cybersecurity incident impacting Ingram Micro and reports that mention Palo Alto Networks’ GlobalProtect VPN,” Palo Alto Networks told BleepingComptuer. “We are currently investigating these claims. Threat actors routinely attempt to exploit stolen credentials or network misconfigurations to gain access through VPN gateways.”
Today, the following statement from Ingram Micro appears:
-
July 7, 2025
Progress on Restoring Transactional Business, Including Subscription Orders
While work remains, we continue to implement support solutions for customers following last week’s cybersecurity incident.
Today, we made important progress on restoring our transactional business. Subscription orders, including renewals and modifications, are available globally and are being processed centrally via Ingram Micro’s support organization. Additionally, we are now able to process orders received by phone or email from the UK, Germany, France, Italy, Spain, Brazil, India, and China. Some limitations still exist with hardware and other technology orders, which will be clarified as orders are placed. To place subscription orders, customers should contact Unified Support. For general inquiries, customers should contact their sales representative.
We thank our customers and vendor partners for their patience as our restoration efforts progress.
