Cyber attack on Toll slows down business but the company is finding solutions and won’t pay ransom.

One of Australia’s biggest transport firms was hit by a ransomwear attack last Friday.

“We received a targeted ransomware attack which led to our decision to immediately isolate and disable some systems in order to contain the spread of the attack,” Toll said in a statement.

“We moved quickly to mitigate the potential impact and we’re undertaking a detailed investigation with a view to restoring all of the relevant systems as soon as possible.

“In the meantime, we’ve introduced manual systems where required to ensure we can continue to meet the needs of our customers.”

As part of the roll-out of business continuity measures in response to the recent cyber-attack, Toll says many of its customers are now able to access its services across large parts of its network globally including freight, parcels, warehousing and logistics, and forwarding operations.

“Based on a combination of automated and manual processes instituted in place of the affected IT systems, freight volumes are returning to usual levels,” Toll said in a statement.

“We have also increased staffing at our contact centres to assist with customer service.
“Notwithstanding the fact services are being provided largely as normal, some customers are experiencing delays or disruption and we’re working to address these issues as we focus on bringing our regular IT systems back online securely.”

The ransomware that has affected Toll is a new variant of the Mailto ransomware.

Toll said it has shared samples of the relevant variant with law enforcement, the Australian Cyber Security Centre, and cyber security organisations to ensure the wider community is protected.

The company said there continues to be no indication that any personal data has been lost as a result of the ransomware attack to its IT systems.

“We continue to monitor this as we work through a detailed investigation.”

As a result of its decision to disable certain systems following the cyber security threat, Toll is continuing to meet the needs of many of its customers through a combination of manual and automated processes across our global operations, although some are experiencing delay or disruption.

For its parcels customers, all of its processing centres are continuing to operate including pick up, processing and dispatch albeit at reduced speed in some cases.

While the online booking platform has been temporarily disabled, parcels customers can book deliveries by calling our contact centres:

Priority – 13 15 31

IPEC – 13 33 66 (Standard Road Parcels)

Intermodal and Specialised – 13 18 21 (Standard Bulk Freight)

The company said at this stage, it has seen no evidence to suggest any personal data has been lost.