Ransomware attack on Starbucks software vendor Blue Yonder disrupts operations in US, Canada – Times of India

A ransomware attack targeting Blue Yonder, a prominent supply chain management software provider, has disrupted operations for several of the company’s high-profile clients, including Starbucks, in North American countries like the US and Canada. The coffee giant revealed that the disruption is impacting its ability to pay and schedule employees.
According to a report by The New York Times, the cyber attack has impacted Starbucks-owned stores in North America – around 11,000 in number. The coffee giant confirmed that the outage at a third-party vendor has disrupted its internal systems for managing their schedules, tracking work hours.
Reports suggest that Starbucks is working to ensure employees are paid accurately and with minimal disruption. The company has said that the customer services aren’t impacted by the ransomware attack.
“Keeping our partners whole despite the outage continues to be our priority and we’re ensuring they will receive pay for all hours worked,” Starbucks said.

Blue Yonder disclosed it experienced disruptions last week

Meanwhile, the affected software provider, Blue Yonder, disclosed last Thursday that it had experienced disruptions due to a ransomware attack and was working to resolve the issue.
As per the latest update by Blue Yonder, the teams are working to respond to the incident. The company has, however, not given any timeline when the services will be restored.
The Blue Yonder team is working around the clock to respond to this incident and continues to make progress. There are no additional updates to share at this time with regard to our restoration timeline following our post yesterday, November 23.
Please continue to check here for more information over the coming days.
Soon after the attack, the company said that it had “implemented several defensive and forensic protocols.”
“With respect to the Blue Yonder Azure public cloud environment, we are actively monitoring and currently do not see any suspicious activity,” the company said.