Kiteworks Advises 9-Hour System Shutdown Amid Cyber Attack Threat

Kiteworks, a secure file sharing and data governance platform formerly known as Accellion, has advised its customers to shut down their systems for a precautionary nine-hour period over the weekend. This directive stems from credible threat intelligence received from federal intelligence authorities, indicating a potential attempt by a threat actor to target some Kiteworks systems. Frank Balonis, Chief Information Security Officer at Kiteworks, stated that the company is taking this "extraordinary measure" to ensure the security and integrity of customer data and systems. The advisory was issued on Friday, March 15, 2024, with the recommended shutdown window commencing on Saturday, March 16, 2024, at 10:00 PM PST and concluding on Sunday, March 17, 2024, at 7:00 AM PST.

Kiteworks emphasized that this precautionary shutdown is not a response to any confirmed breach or compromise of its platform. Instead, it is a proactive step to mitigate potential risks identified through the threat intelligence. The company has been working closely with federal intelligence agencies to assess the nature and scope of the potential threat. The decision to recommend a full system shutdown, even for a limited duration, highlights the seriousness with which Kiteworks is treating the intelligence. The company's platform is designed to handle sensitive and regulated data for various industries, including finance, healthcare, and government, making the protection of its infrastructure paramount. The nine-hour window was chosen to minimize disruption while allowing for necessary security checks and potential mitigation efforts.

Customers were instructed to initiate the shutdown process at the specified time and to ensure all data transfers and critical operations were completed beforehand. Kiteworks provided detailed guidance on the shutdown and restart procedures to its clients. The company also stated that its security teams would be on high alert throughout the weekend, monitoring for any suspicious activity. This incident underscores the persistent and evolving nature of cyber threats targeting critical infrastructure and data management platforms. Kiteworks, as a provider of secure solutions, faces particular scrutiny and responsibility in safeguarding its clients' sensitive information. The company's transparency in communicating the threat and its proactive response aims to maintain customer trust and demonstrate its commitment to security, even in the face of potential, albeit unconfirmed, threats. The specific nature of the threat intelligence, including the identity of the potential threat actor or the exact methods they might employ, has not been disclosed, citing ongoing investigations and security protocols.