Russian Retailer Poryadok Suffers Five-Day Cyberattack Disruption

Russian home goods retailer Poryadok has been grappling with a severe cyberattack that has crippled its online services and forced the closure of numerous physical stores for five consecutive days. The disruption, which began on Sunday, has left customers unable to collect orders, access loyalty accounts, or contact customer support, impacting operations across 32 Russian cities where the company maintains 48 retail locations.

Poryadok confirmed the incident was a cyberattack, stating, "We have been hit by a cyberattack, but we are already actively working to restore our services and gradually return operations to normal." However, the company has not disclosed the specific attack vector, the nature of the malware involved, or a timeline for the full restoration of services. This lack of transparency has exacerbated customer frustration, with many arriving at stores unaware of the ongoing issues.

Reports from local media and customer accounts indicate that stores in various cities, including Voronezh where the company was founded, remained closed with notices citing unspecified technical problems. Customers have expressed significant inconvenience, with some unable to collect pre-paid orders or process returns due to the inaccessibility of both the company's website and its physical points of sale. The company's website has shown that only some stores are still affected, but the full extent of the ongoing disruption remains unclear.

Outage monitoring services have corroborated the widespread issues, with Poryadok's online services remaining unavailable as of Friday. The prolonged outage raises concerns about the potential impact on the company's revenue and customer trust. The lack of a clear resolution timeline further compounds the uncertainty for both consumers and the business itself.

While Poryadok has not attributed the attack to any specific threat actor or disclosed whether customer data was compromised, the incident follows a pattern of cyberattacks targeting Russian businesses. In September, Dodo Pizza, a popular fast-food chain, experienced a breach claimed by the group DataSuckers. More recently, in mid-October, Russian online travel agency Anywayanyday temporarily suspended bookings after its IT systems were disrupted by a cyberattack.

The ongoing disruption at Poryadok highlights the persistent threat posed by cyberattacks to retail operations, emphasizing the critical need for robust cybersecurity measures, incident response plans, and transparent communication with customers during such events. The company's ability to recover and rebuild customer confidence will depend heavily on its swift and effective resolution of the current crisis.