Cyber Incident Victim: Terry Town
Date:
Jul 2024
Location:
United States of America
Summary
A cyberattack disrupted Terry Town's operations, causing a multi-day outage that impacted order processing, inventory management, and communications systems. The supplier temporarily lost access to critical functions and staff credentials were reset as a security measure, though email systems remained intermittently accessible. After restoration efforts, operations resumed fully with enhanced security protocols implemented, though a backlog of communications and processing requests remained. Investigations found no evidence of data compromise. The incident highlights broader cybersecurity risks facing the industry, including ransomware and targeted scams against business entities.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Terry Town experienced a cyberattack that disrupted operations from July 15, 2024, following a suspected weekend intrusion preceding that date. The attack targeted the supplier’s main server, crippling order processing, inventory management, and communication systems including phones and emails. This forced a complete operational halt from Monday through Wednesday, preventing order fulfillment and shipment activities. While staff email accounts remained technically functional, access was temporarily blocked as Terry Town proactively reset passwords to contain the breach. By July 18, partial communication capabilities were restored via phone and email, though full operational recovery took approximately two weeks. President Sy Ereren confirmed full restoration of systems by July 29, 2024, emphasizing all communication channels were reopened. The incident caused significant order processing backlogs despite the technical recovery. Terry Town stated no evidence indicated customer or partner data was compromised during the breach.
In response to the attack, Terry Town initiated comprehensive system scans to identify vulnerabilities and implemented undisclosed enhanced security measures to fortify defenses. Password resets for staff accounts formed part of immediate containment actions. An internal investigation remains ongoing as of the latest reporting, though the company reiterated its conclusion that no data exfiltration occurred. Operational recovery efforts prioritized clearing accumulated order backlogs and restoring client communication capacity. The supplier acknowledged industry-wide cybercrime trends, referencing unrelated incidents involving PPAI’s prior fraud targeting and a Florida distributorship’s bank account hack, though these were not connected to Terry Town’s event. Company leadership characterized system restoration as complete but highlighted residual challenges in resolving workflow disruptions caused by the multi-day outage.