Starbucks, UK grocers impacted by ransomware attack on Blue Yonder

Learn more.

A ransomware attack on supply chain management software provider Blue Yonder has impacted global operations at various companies in the United States and United Kingdom, affecting major retailers such as Starbucks and several UK-based supermarket chains. 

Starbucks has reported difficulties in processing payroll and managing employee schedules due to the incident, telling the Wall Street Journal that locations have resorted to manual calculations for employee pay. While the situation does not affect customer service, Starbucks assured its employees that they would receive their due compensation for all hours worked. 

The attack on Arizona-based Blue Yonder, which is a division of Japanese electronics conglomerate Panasonic, was identified this past weekend as a ransomware incident targeting its managed services hosted environment. The company, boasting a clientele of over 3,000 customers, is working alongside external cybersecurity experts to address the breach. Blue Yonder has yet to provide a timeline for when services might be fully restored.

Beyond Starbucks, the attack has affected several major UK supermarket chains, including Morrisons and Sainsbury’s. Morrisons told grocery trade publication The Grocer that its fresh and produce warehouse management systems were disrupted. Sainsbury’s acknowledged a temporary impact on its operations, though services have since been restored. 

While Blue Yonder has not detailed the full extent of the attack’s impact across its customer base, the breach underscores the significant risks posed by cybercriminals targeting critical supply chain infrastructures. Attacks like those targeting software used to power enterprise-level organizations – MoveIT, CDK, 3CX, Kaseya, among others — have become increasingly common as cybercriminals take advantage of lax cybersecurity practices. 

The identity of the ransomware perpetrators remains unknown, and it is unclear if any customer data has been compromised.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure