Cloud hosting provider Rackspace says some of its clients experienced a data breach as a result of the ransomware attack it experienced last month.
A forensic analysis found that the threat actor had accessed the personal storage tables (PST) of 27 Hosted Exchange customers, the business stated in a forum post update.
User email messages and calendar entries are among the things that are stored in PST files, a Microsoft-created proprietary data storage format.
There is “no evidence,” according to Rackspace, that the attackers who accessed the PST files really saw or abused them. However, the company did not elaborate on how it had reached that determination.
The cloud hoster claimed to have been in touch with the 27 clients who had their data stolen by a ransomware attack.
In total, Rackspace claimed that its Hosted Exchange service had close to 30,000 users.
Additionally confirming that the PLAY ransomware group was responsible for the assault, Rackspace directed users to security provider Crowdstrike for more details on how the weaknesses were exploited.
The business claimed to have notified clients for whom it had recovered more than 50% of their mails and made the PST files accessible through portals.
The Hosted Exchange email, calendaring, and contacts services will no longer be offered by Rackspace.
Instead, it will entice clients to switch to Microsoft 365, which, according to Rackspace, “offers a more flexible pricing strategy, as well as more modern features and capabilities.”
