2NetworkIT

2NetworkIT, also known as 2NetworkIT, is an Ottawa‑area based information technology services firm headquartered in Canada. The firm delivers IT services to its customer base, which includes other organizations that rely on its technical support. As an IT services provider, its offerings encompass general technical support and infrastructure management. The organization operates within the Canadian technology sector, serving clients that require ongoing IT assistance. Its location in Ottawa situates it within a region known for a concentration of government and private‑sector technology contracts. The firm’s core function is to maintain and support the information technology environments of its customers.

On December 8, 2022, 2NetworkIT experienced a ransomware attack attributed to the Cuba strain. The attack resulted in encryption of eleven servers, including a network‑attached backup system. Isolated virtual machine and offline backup servers were not compromised, allowing the firm to recover. Using resilient offline backups, the organization restored full operations within forty‑eight hours. Customers suffered a temporary loss of one day’s worth of email and data during the incident. The Cuba gang threatened data leakage but presented no evidence of exfiltration, leading the victim to believe no information was stolen. Initial compromise is suspected to have originated from a malicious attachment received via a customer. The incident fits a broader pattern of targeting NATO‑aligned entities by suspected Russian‑aligned threat actors. The firm’s reliance on offline backups proved critical in limiting the impact of the ransomware. No further details about the organization’s size, ownership, or additional services are publicly available in the provided sources.