CloudNordic is still in the process of determining how the attackers infiltrated its systems, but initial speculation points to a migration of servers from one data center to another. During this migration, a previously compromised endpoint was inadvertently connected to a separate network with access to internal endpoints, leading to disastrous consequences.
The company concluded, “Through the internal network, attackers gained access to central administration systems and backup systems.”