When Ransomware Group REvil Vanished, Its Victims Were Stranded

The weird consequences of the disappearance of a cybergang.

A person types at a backlit keyboard.Photographer: Chris Ratcliffe/Bloomberg

Hi, this is Kartikay on the cyber team. Ransomware attacks always hurt—but perhaps never more so than when the victim is compromised through the very company they pay for IT and security services.

That’s what happened to the nearly 1,500 targets attacked through a vulnerability at Kaseya Ltd., an IT management and antivirus software provider. Eastern European hackers compromised Kaseya in early July, and then went on to infect its customers and, in turn, their customers en masse with ransomware made by the REvil hacking group.