Sandhills Global

Sandhills Global operates hosted machinery marketplace platforms.
The company’s headquarters is located in the United States of America.

On September 30, 2021, Sandhills Global experienced a ransomware attack attributed to the Conti group.
The attack disrupted operations and caused widespread outages across the hosted machinery marketplace platforms and internal systems.
In response, the company proactively shut down its IT infrastructure to contain the threat.
This shutdown rendered the corporate websites inaccessible and disabled the telephone service lines.

Users attempting to reach the Sandhills Global online services encountered Cloudflare connectivity errors.
The disruption persisted until the organization completed its containment and recovery procedures.
Normal customer communications were delayed as the company focused on restoring its systems.

Conti is known for exfiltrating data before encrypting files in many of its ransomware attacks.
In the Sandhills Global case, the summary notes that Conti likely employed extortion tactics, although specific ransom demands were not disclosed.
Whether any data was actually exfiltrated from Sandhills Global’s systems remains unverified according to the available reporting.

Sandhills Global engaged external cybersecurity experts to investigate the breach and to assist with restoring its platforms.
The recovery effort involved rebuilding affected systems and verifying the integrity of the hosted marketplace services.
The company publicly acknowledged that the incident caused operational delays in communicating with customers during the restoration phase.