IT security incident at Infoniqa – Extent still unknown
Infoniqa, a provider of software for payroll accounting and HR, among other things, was the victim of a cyber attack. The services were disrupted.
(Image: janews/Shutterstock.com)
The provider of financial software for payroll accounting, or human resources (HR), Infoniqa, has been the target of a cyber attack. The cloud-based services were apparently disrupted. However, these are now said to be available again.
When asked by heise online, Infoniqa cites the night of Sunday, August 3, to Monday, August 4, as the time of the attack. “We recognized it on Monday morning and immediately implemented the protective measures we had prepared for such cases. These included shutting down and disconnecting the affected systems,” said a company spokesperson.
“Infoniqa products and solutions in Germany and Austria were available to customers throughout, and any technical restrictions were resolved as of Tuesday, August 12,” he continued. However, the missing “The” at the beginning of this sentence seems important: Infoniqa itself names technical restrictions. We have also received information from a reader that he was unable to use the services for over a week.
“ONE Start Cloud” not usable
The further statement also obscures the actual effects. According to the statement, “In Switzerland […] all systems and services were functional and secure for our customers at all times without restrictions” – but “except for ONE Start Cloud, for which we were able to provide operational alternatives.”
Videos by heise
Infoniqa does not yet wish to comment on the cause during the ongoing investigation of the IT incident. “External cyber security experts and forensic specialists are currently analyzing the incident. Thoroughness is always more important than speed,” explains the Infoniqa spokesperson. For this reason, the company cannot yet provide any information on whether and what data has been leaked.
In a notification email to customers, Infoniqa also mentioned that the on-premises installations were not restricted, not even by ONE Start. Accordingly, the following services could continue to be used without restrictions: ONE Start on premises, ONE 50 Cloud and on premises, ONE 200 Cloud and on premises, as well as RunMyPayroll.
(dmk)
