In April 2023, Americold, a notable cold storage and logistics company, experienced a data breach. The breach resulted in an outage that disrupted the company's operations, leading to a shutdown of their IT network to manage the incident. The attackers accessed sensitive information, although specific details about the data or the number of users affected were not disclosed.

How many accounts were compromised?

The breach impacted data related to approximately 130,000 individuals.

What data was leaked?

The data exposed in the breach included names, addresses, Social Security numbers, driver's license/state ID numbers, passport numbers, financial account information, and employment-related health insurance and medical information.

How was Americold hacked?

The Cactus ransomware group breached Americold's systems using double-extortion attacks, initially stealing data for ransom leverage and subsequently encrypting compromised systems. While the exact infiltration methods remain unclear, malware was deployed on certain systems during the cybersecurity incident.

Americold's solution

In response to the hacking incident, Americold took action to mitigate the breach's impact and prevent future occurrences. Although specific enhanced security measures remain unclear, the company shut down its IT network to contain the breach and rebuild impacted systems. Additionally, Americold notified affected current and former employees and their dependents about the breach. The company's efforts to secure its systems and protect sensitive information demonstrate its commitment to addressing cybersecurity threats.

How do I know if I was affected?

Americold notified affected current and former employees and their dependents about the breach. If you believe you may have been affected but did not receive a notification, you can visit HaveIBeenPwned to check your credentials.

What should affected users do?

In general, affected users should:

• Change Your Passwords: Immediately update your passwords for any accounts that may have been compromised. Make sure the new passwords are strong and unique, not previously used on any other platform.

• Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

• Enable Two-Factor Authentication (2FA): Activate 2FA on any affected accounts. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

• Monitor Your Accounts: Keep an eye on your financial and personal accounts for any suspicious activity. Report any unauthorized transactions or changes to the appropriate institutions immediately.

For more specific help and instructions related to Americold's data breach, please contact Americold's support directly.

Where can I go to learn more?

If you want to find more information on the Americold data breach, check out the following news articles:

• Cold storage giant Americold discloses data breach after April malware attack

• Nearly 130,000 affected by ransomware attack on cold storage company Americold