Did Kronos Lose Any data?

The parent company of the software gave fewer details about the attack. They did not mention whether they lost any data. They stated that they didn’t lose sensitive data like date of birth, social security details, and bank account details; instead, other details were lost like email addresses.

Some of the people who lost a lot of data included Nationals of Brazil, India, Hong Kong, New Zealand, Belgium, e.t.c.Organizations from Cleveland reported that they lost the last four digits of their Social Security numbers.

Many cybersecurity experts like Mac McMillan had reported that the attack could be related to the Log4j vulnerability, found in the Java programming language, but the company denied the reports.

Kronos also reported a strong backup system with secure transmissions that could hold data for 28 days. The backups get stored in different environments and use different architecture compared to those used by the production environments. The hackers tried to block all the communication between backup servers and the production environment making restoration of services take longer.

The organization appointed Mandiant, a cybersecurity firm, to provide reports about the incident and provide future monitoring of the situation to avoid such scenarios in the future, and West Monroe to help bring everything to normal.

Effects of Kronos Outage on Companies and Organisations

• During the tracking of worker’s worktime, Kronos provided sheets that they will use to fill in data to track the employee’s time. This is very hard for some companies with over 2,000 workers across different locations but the same company.
• Some organizations called on their workers to monitor themselves daily and send their data to Human Resource departments via Google forms after a certain period. It was demanded that the spreadsheets and Google form no longer work, and companies retreated to emails where each worker sent his hours via email to the Human Resource.
• All the affected institutions who used the software have to input the manually collected data during the Kronos outage when all the services resume. It will take a lot of time and may affect and delay some processes like issuing tax information and w2 forms.
• Some companies who are the customers were disappointed and prompted to file a legal suit against the software owners. For example, the Metropolitan Transport Authority spokesperson was the first to report taking legal action.

Click here to get frequently asked Cyber Security Interview questions & answers for freshers & experienced professionals!

Subscribe to our YouTube channel to get new updates..!

Effect of Kronos Outage on healthcare

Healthcare was one of the fields that were hit big by the attack. Hospitals use Kronos software in their systems, which has affected the smooth running of the activities. One of the products attacked in the Kronos outage was meant for health care administration. It made the management duties very hard, especially for processing payments and reporting attendance and timekeeping of the healthcare workers.

It affected all hospitals, i.e., rural hospitals, small clinics, multi-urban hospitals, and big hospitals. It made them pay workers inaccurately, with missing allowances and deductions, making them go to courts, riot on social media, and visit their respective unions.

UMass Memorial Health described this incident as a lesson for their plans. Luckily enough, they reacted quickly during the attack by improvising a payroll that could pay their workers without using hours worked. It made it easier for workers to key in important details, and HR made any adjustment needed faster.

Examples of hospitals affected were:

• Workers at the University of Florida Health missed their six weeks of overtime and holiday pay due to a lack of records.
• Pittsburgh’s Allegheny General Hospital missed more than 50 hours on its paycheck.
• Nurses at Missoula’s Community Medical Centermissed some of their monthly dues.

Other hospitals that lost the data include Monument health, Baptist health, Ascension St. Vincen, and Ohio health.

If you have any doubts about Cyber Security, then get them clarified by cyber experts on our Cyber Security Tutorial!

Let’s make Cybersecurity a priority

Cybercrime activities are rising, and organizations like software providers and users should have a formidable backup solution. It avoids scenarios where you lose all the data and don’t have an option. Organizations should also have alternative solutions in case of such a scenario, i.e., hospitals can set up alternative payrolls that don’t rely on the Kronos software.

Hackers target organizations with a lot of data. For instance, the payroll software serves more than one million users, which can be one of the motivations of the attack to harvest a lot of data.

The Kronos outage was a lesson to other enterprises and organizations who don’t invest in cybersecurity teams that help them avoid such risks from occurring. Its the role of the vendor and user to keep their data secure.

If you don’t take security with the seriousness it deserves, you lose many clients. After the attack, some organizations had to cancel the contracts and look for alternatives which was a significant loss.

Related Articles: