{"id":49603,"date":"2022-12-06T21:59:00","date_gmt":"2022-12-06T21:59:00","guid":{"rendered":"https:\/\/www.networkworld.com\/article\/3681895\/ransomware-attack-knocks-rackspaces-exchange-servers-offline.html#tk.rss_security"},"modified":"2022-12-06T21:59:00","modified_gmt":"2022-12-06T21:59:00","slug":"ransomware-attack-knocks-rackspaces-exchange-servers-offline","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ransomware-attack-knocks-rackspaces-exchange-servers-offline\/","title":{"rendered":"Ransomware attack knocks Rackspace\u2019s Exchange servers offline"},"content":{"rendered":"
<\/div>\n

Cloud services and hosting provider Rackspace Technology acknowledged Tuesday that a recent incident that took most of its Hosted Exchange email server business offline was the product of a ransomware<\/a> attack. The company shut the service down last Friday.<\/p>\n

It was not, initially, clear what had caused the outage, but Rackspace quickly moved to shift Exchange customers over to Microsoft 365, as this part of the company\u2019s infrastructure was apparently unaffected.<\/p>\n

Rackpsace offers migration to Microsoft 365<\/h2>\n

Rackspace said today that there is \u201cno timeline\u201d for a restoration of Exchange service, but it is offering Exchange users technical assistance and free access to Microsoft 365 as a substitute, though it acknowledged that migration is unlikely to be a simple process for every user. Rackspace said that, while the migration is in progress, customers can forward email sent to their Hosted Exchange inboxes to an external server, as a temporary workaround.<\/p>\n

The company said that the incident was isolated to its Hosted Exchange business, and that the rest of its lineup of products and services are fully functional. It\u2019s unclear how Rackspace was able to limit the access of the ransomware attackers to one corner of its operations, and the company did not respond to a request for comment on this point.<\/p>\n

The investigation is \u201cstill in its early stages,\u201d according to Rackspace\u2019s official updates on the matter<\/a>. The company added that it is, as yet, unable to ascertain whether any consumer data was affected by the attack, but pledged to notify customers if that proves to be the case. Some email archives remain accessible, according to the updates, and Rackspace said that it is working to provide those to customers \u201cwhere available,\u201d as a precursor to migrating over to Microsoft 365.<\/p>\n

Rackspace has also hired \u201ca leading cyber defense firm\u201d to assist in the investigation, though it declined to name the company publicly.<\/p>\n