Back to Ransomware


California-based IT service provider pays ransom after a Sodinokibi ransomware attack.

In December 2019, Synoptek, an IT service provider in California, was reported to be a victim of a Sodinokibi ransomware attack.  It offers comprehensive IT management and consultancy services to organizations worldwide, including state and local governments as well as organizations in the financial services, healthcare, manufacturing, media, retail, and software industries. The company has paid a ransom to the attackers in exchange for decryption keys. 

What happened?

The incident was brought to Synoptek's attention when the affected customers posted about the attack on Reddit on December 24. The company reported the attack a few days later on its Twitter account. Sodinokibi, also known as REvil,targets Windows systems and encrypts files stored on victims' computers. 

Synoptek CEO Tim Britt announced that the attack impacted only 1,178 customers. Fortunately, they were able to contain the attack on Christmas Day. 

Ransomware attacks can be costly. Invest in a tool like ManageEngine DataSecurity Plus to secure data and mitigate ransomware attacks. Download a 30-day, free trial of DataSecurity Plus today.

How ManageEngine can help.

Investing in a ransomware detection tool helps you detect and respond to ransomware attacks in real time to minimize the impact on your organization. Here are some best practices DataSecurity Plus can help you implement to handle ransomware attacks.

  • Detect ransomware with real-time mass access alerts. Monitor the frequency of file modifications by a user, and issue alerts whenever the number of modifications crosses a threshold within a specified time.
  • Quarantine ransomware and shut down infected devices with a customizable and automated response system. Set automated alert responses through the execution of a batch file to respond to mass access alerts.
  • View in-depth details of events for further investigation. Generate customizable, audit-ready reports on all file-related changes, access attempts, and share permissions.

Learn more about the eight best practices that can help you avoid cyberattacks and protect your organization. Start your free, 30-day trial of DataSecurity Plus today.

© 2022 Zoho Corporation Pvt. Ltd. All rights reserved.


Stay In The Know

Thank you

You will receive weekly cybersecurity news soon!

  • Please enter a business email id
    By clicking 'I'm Interested', you agree to processing of personal data according to the Privacy Policy.