Following is an update on our progress regarding the May 6 interruption of our network and services:
We have now restored service to nearly all customer applications and platforms. To date, we have found no evidence that customer data or systems were compromised.
As previously stated, on Monday May 6, our IT team detected anomalies in some devices and servers and, upon investigation, discovered malware. The malware detected was a new (“zero-day”) strain, for which the signature was then unknown, and there was not an existing antivirus solution available to detect the presence of the malicious code. The malware involved in this incident is designed to infiltrate, encrypt files, and disrupt business.
In response, out of extreme caution, we took a very broad range of customer and internal applications and platforms (including our VoIP phone systems) offline. We notified law enforcement regarding the incident.
After initially containing the malware, we began reinforcing protective measures. Our enterprise anti-virus vendors have provided us with updated detection files. Over several days, we then worked to bring systems and applications back on-line. This process involved system-by-system and application-by-application assessment, scanning, testing, and quality assurance protocols designed to provide protections that when we return to service, we do so in a safe and secure way.
Our investigation of the incident is on-going. Further updates will be provided.
Forward-looking Statements and Other Important Legal Information
This report contains forward-looking statements. These statements may be identified by words such as “expect”, “should”, “could”, “shall” and similar expressions. Wolters Kluwer cautions that such forward-looking statements are qualified by certain risks and uncertainties that could cause actual results and events to differ materially from what is contemplated by the forward-looking statements. Factors which could cause actual results to differ from these forward-looking statements may include, without limitation, general economic conditions; conditions in the markets in which Wolters Kluwer is engaged; behavior of customers, suppliers, and competitors; technological developments; the implementation and execution of new ICT systems or outsourcing; and legal, tax, and regulatory rules affecting Wolters Kluwer’s businesses, as well as risks related to mergers, acquisitions, and divestments. In addition, financial risks such as currency movements, interest rate fluctuations, liquidity, and credit risks could influence future results. The foregoing list of factors should not be construed as exhaustive. Wolters Kluwer disclaims any intention or obligation to publicly update or revise any forward-looking statements, whether as a result of new information, future events or otherwise.