Image: Tiger Lily via Pexels [Jonathan Greig](/author/jonathan-greig)December 6th, 2024 Blue Yonder says some customers restored as ransomware gang boasts of attack============================================================================Panasonic-owned software giant Blue Yonder said several of its customers’ systems are back up and running, as the gang allegedly behind the incident came forward on Friday to boast about troves of stolen data.A Blue Yonder spokesperson declined to speak about the claims made by the Termite ransomware gang or whether a ransom had been issued but said the company is ‘making good progress’ in recovering from the cyberattack that was initially [announced ahead of the Thanksgiving holiday](https://therecord.media/retailers-struggle-after-ransomware-attack-on-supply-chain-tech-company) on November 21.’Several of our impacted customers have been brought back online, and we are actively working directly with others to return them to normal business operations,’ the spokesperson said.’Blue Yonder has been working diligently together with external cybersecurity firms and hardened our defensive and forensic protocols.’The company — which has been at the center of supply chain and operational issues for [supermarkets, manufacturers and even companies like Starbucks](https://therecord.media/starbucks-bic-morrisons-blue-yonder-supply-chain-attack-ransomware) — published a similar statement last weekend.On Friday, the Termite gang [claimed](https://x.com/h4ckmanac/status/1864999992546509263?s=46&t=u19CbogN0TP7iqFc4MlyEQ) it stole 680 GB of data that includes emails, insurance documents, company data and more.Cybersecurity expert Valéry Rieß-Marchive [noted](https://x.com/valerymarchive/status/1858508329321931132?s=46&t=u19CbogN0TP7iqFc4MlyEQ) that the gang has been active since April and previously took credit for an [attack on the government of French island nation Réunion](https://www.linfo.re/la-reunion/faits-divers/le-departement-victime-d-une-cyberattaque-mercredi-fuite-de-donnees-limitee). Termite has [listed](https://www.ksbw.com/article/watsonville-hospital-faces-prolonged-computer-outage/63098463) [several](https://l-express.ca/le-conseil-scolaire-viamonde-victime-dune-cyberattaque/) [victims](https://www.borncity.com/blog/2024/11/09/datenleck-bei-maschinen-handelsseite-ibz-handelswelt-de-lebenshilfe-heinsberg-mit-problemen/) across the world, many of which have [not confirmed](https://x.com/alvierid/status/1858495655120953647?s=46&t=u19CbogN0TP7iqFc4MlyEQ) whether they have been attacked.Some ransomware researchers have [tied](https://x.com/pcrisk/status/1864925231942430790?s=46&t=u19CbogN0TP7iqFc4MlyEQ) the code used by the gang to the Babuk ransomware family. Last week cybersecurity firm Trend Micro [said](https://x.com/trendmicrorsrch/status/1862104180866846788?s=46&t=u19CbogN0TP7iqFc4MlyEQ) there are still errors in the malware that the group is working out.At least one security firm [said](https://x.com/_venarix_/status/1865021861773402427?s=46&t=u19CbogN0TP7iqFc4MlyEQ) Blue Yonder had been attacked by another ransomware gang in 2021.The company was [acquired](https://media.blueyonder.com/panasonic-completes-acquisition-of-blue-yonder/) by Panasonic in 2021 for about $8.5 billion and provides systems for fulfillment, delivery and returns for more than 3,000 major companies across 76 countries. * [](https://twitter.com/intent/tweet?text=Blue Yonder says some customers restored as ransomware gang boasts of attack%20%20@TheRecord_Media)* [](https://www.linkedin.com/shareArticle?mini=true&url=&title=Blue Yonder says some customers restored as ransomware gang boasts of attack)* [](https://www.facebook.com/sharer/sharer.php?u=&src=sdkpreparse)* [](https://www.reddit.com/submit?url=)* [](https://news.ycombinator.com/submitlink?u=&t=Blue Yonder says some customers restored as ransomware gang boasts of attack)* [](https://bsky.app/intent/compose?text=Blue Yonder says some customers restored as ransomware gang boasts of attack ) * [Industry](/)* [Cybercrime](/news/cybercrime)* [News](/) Get more insights with the Recorded Future Intelligence Cloud.[Learn more.](https://www.recordedfuture.com/platform?mtm_campaign=ad-unit-record) Tags* [Blue Yonder](/)* [supply chain](/tag/supply-chain)* [retail](/tag/retail)* [software](/tag/software)* [Panasonic](/tag/panasonic)* [Ransomware](/tag/ransomware)* [incident response](/tag/incident-response) No previous article No new articles  [Jonathan Greig](/author/jonathan-greig) is a Breaking News Reporter at Recorded Future News. Jonathan has worked across the globe as a journalist since 2014. Before moving back to New York City, he worked for news outlets in South Africa, Jordan and Cambodia. He previously covered cybersecurity at ZDNet and TechRepublic. [](https://twitter.com/jgreigj)
Related Tags:
NAICS: 335 – Electrical Equipment
Appliance
Component Manufacturing
NAICS: 72 – Accommodation And Food Services
NAICS: 519 – Web Search Portals
Libraries
Archives
Other Information Services
NAICS: 722 – Food Services And Drinking Places
NAICS: 518 – Computing Infrastructure Providers
Data Processing
Web Hosting
Related Services
NAICS: 92 – Public Administration
NAICS: 33 – Manufacturing – Metal
Electronics And Other
NAICS: 51 – Information
Babyk
Associated Indicators: