Paper Manufacturer Avery Products Hit by Ransomware
Brea, California-based paper products provider, Avery Products Corporation, discovered a ransomware attack that persisted for almost five months affecting “certain systems.” “On December 9, 2024, Avery became aware of a ransomware attack relating to certain systems,” the company said in a letter to victims. “Avery immediately launched an investigation, with the aid of forensic experts, to determine the nature and scope of the activity.
“Our investigation determined that an unauthorized actor inserted malicious software used to “scrape” credit card information used on our website avery.com between July 18, 2024, and December 9, 2024,” the company said. Avery then proceeded with a lengthy investigation to identify the personal information contained in the affected system, and then reviewed its internal records to locate the appropriate mailing addresses of those that ended up victimized by the attack. There were 61,193 victims of the attack, the company said.