Kronos, a workforce management and human resources solutions provider known for its timekeeping, payroll, and employee benefits services, has suffered a ransomware attack over the weekend. Kronos merged with Ultimate Software in 2020 to create the company UKG, and Kronos’ software is utilized throughout various industries (such as education institutions, local governments, etc.). UKG published in a statement on December 13th, which is linked below, detailing that the “ransomware incident” impacted the “Kronos Private Cloud—the portion of [the] business where UKG Workforce Central, UKG TeleStaff, Healthcare Extensions, and Banking Scheduling Solutions are deployed”. UKG has yet to confirm if any additional products or solutions were impacted by the attack or if any data has been exfiltrated by the unknown actor responsible for the attack. An investigation is in progress, and it is advised that all impacted companies “evaluate and implement alternative business continuity protocols”. CTAPT will provide insight on any additional information revealed through UKG’s investigation, such as compromised data and the identity of the threat actor responsible.