Ingram Micro, a major global technology distributor, experienced a ransomware attack in early July 2025 that caused a widespread outage and disrupted its systems. The company confirmed the attack over the July 4 weekend and has been working diligently to restore affected systems to resume processing and shipping orders. The ransomware group responsible is identified as SafePay, a new and highly active threat actor in the ransomware landscape. Despite the disruption, Ingram Micro has begun resuming some order processing, although not all systems are fully operational five days after the attack. The outage has affected the company's operations worldwide, including its distribution services in Mexico, where it partners with major brands such as Apple, LG, and Samsung. Many partners have expressed continued support for Ingram Micro amid the ongoing recovery efforts.
Despite not all systems being back up and running five days after Ingram Micro suffered a ransomware attack, many partners have pledged their loyalty and are sticking by Ingram’s side. https://t.co/OX5Qn8QhaL
Los servicios de #IngramMicro siguen detenidos tras un ataque de #ransomware. La empresa es uno de los eslabones de distribución de tecnología. En México trabajan con Apple, LG, Samsung, por mencionar algunas. #TrendingREFORMA https://t.co/suYCAcTHta
Ingram Micro resumes some orders after a cyberattack shut down its systems https://t.co/NWMziIpxiJ