Marketron on Wednesday continued to work toward a resolution of the apparent ransomware attack that took down most of its systems over the weekend.
It told clients that “significant progress has been made toward restoring service for Marketron Traffic and Visual Traffic customers” and that it expected to begin a rollout of several restored services Wednesday evening.
“With assistance from our third-party remediation and restoration specialists and forensic investigators, we have prepared an entirely new environment to begin safely and securely restoring services and data,” it said in an email Wednesday afternoon.
“Customers will have services restored on a rolling basis in phases as we work to move to this environment. Once moved to this location, all users from your market location/database will be restored simultaneously.” On Thursday morning, its website said that the services pending in a phased rollout right now are Marketron Traffic, Visual Traffic Cloud and Marketron NXT.
It expected this process to take several days.
Marketron told users that they’d receive an email when it was time for account service to be restored, with instructions.
“In addition to restoration of services, your data will also be restored,” with information current only to Saturday morning Sept. 18. “You will need to take steps to reconcile log information between Sept. 18 and the time your account is restored. Recommendations for the reconciliation process are on the status page.”
The attack reportedly was made by the Russian criminal entity BlackMatter.
As of midday Wednesday, the services that remained down were Marketron Traffic, Visual Traffic, Marketron Electronic Services for all traffic clients; Advertiser Portal; Traffic Portal; Insight; RepPak; Marketron NXT; and Marketron Learning Center.
The company serves approximately 6,000 media organizations.
