Indigo Books & Music, the largest bookstore chain in Canada, has been struck by a cyberattack yesterday, causing the company to make the website unavailable to customers and to only accept cash payments.
The exact nature of the incident remains unclear but Indigo is not ruling out that hackers may have stolen customer data.
A few hours later, Indigo disclosed that its computer systems were the target of a cyberattack and it was in the process of investigating the incident with the help of third-party experts.
As Indigo said that it is working to restore the systems, another possibility would be a ransomware attack, which typically results in a data breach as hackers steal data and threaten to publish it unless the victim pays the ransom.
Indigo has thousands of employees, 86 superstores under the banners Chapters and Indigo, and 123 small format stores.
BleepingComputer learned from threat intelligence company Kela that at least one cybercrime market was selling in February and January Indigo credentials stolen by information-stealing malware, like Redline, Vidar, and Raccoon.
