ct food bank staff

TTEC, [NASDAQ: TTEC], a company used by some of the world’s largest brands to help manage customer support and sales online and over the phone, is dealing with disruptions from a network security incident resulting from a ransomware attack, KrebsOnSecurity has learned.

While many companies have been laying off or furloughing workers in response to the Coronavirus pandemic, TTEC has been massively hiring. Formerly TeleTech Holdings Inc., Englewood, Co.-based TTEC now has nearly 60,000 employees, most of whom work from home and answer customer support calls on behalf of a large number of name-brand companies, like Bank of America, Best Buy, Credit Karma, Dish Network, Kaiser Permanente, USAA and Verizon.

On Sept. 14, KrebsOnSecurity heard from a reader who passed on an internal message apparently sent by TTEC to certain employees regarding the status of a widespread system outage that began on Sunday, Sept. 12.

“We’re continuing to address the system outage impacting access to the network, applications and customer support,” reads an internal message sent by TTEC to certain employees.

TTEC has not responded to requests for comment. A phone call placed to the media contact number listed on an August 2021 TTEC earnings release produced a message saying it was a non-working number.

[Update, 6:20 p.m. ET: TTEC confirmed a ransomware attack. See the update at the end of this piece for their statement]

TTEC’s own message to employees suggests the company’s network may have been hit by the ransomware group “Ragnar Locker,” (or else by a rival ransomware gang pretending to be Ragnar). The message urged employees to avoid clicking on a file that suddenly may have appeared in their Windows start menu called “!RA!G!N!A!R!”

“DO NOT click on this file,” the notice read. “It’s a nuisance message file and we’re working on removing it from our systems.”

Ragnar Locker is an aggressive ransomware group that typically demands millions of dollars worth of cryptocurrency in ransom payments. In an announcement published on the group’s darknet leak site this week, the group threatened to publish the full data of victims who seek help from law enforcement and investigative agencies following a ransomware attack.

One of the messages texted to TTEC employees included a link to a Zoom videoconference line at ttec.zoom.us. Clicking that link opened a Zoom session in which multiple TTEC employees who were sharing their screens took turns using the company’s Global Service Desk, an internal TTEC system for tracking customer support tickets.

The TTEC employees appear to be using the Zoom conference line to report the status of various customer support teams, most of which are reporting “unable to work” at the moment.

For example, TTEC’s Service Desk reports that hundreds of TTEC employees assigned to work with Bank of America’s prepaid services are unable to work because they can’t remotely connect to TTEC’s customer service tools. More than 1,000 TTEC employees are currently unable to do their normal customer support work for Verizon, according to the Service Desk data. Hundreds of employees assigned to handle calls for Kaiser Permanente also are unable to work.

“They’ve been radio silent all week except to notify employees to take another day off,” said the source who passed on the TTEC messages, who spoke to KrebsOnSecurity on condition of anonymity. “As far as I know, all low-level employees have another day off today.”

The extent and severity of the incident at TTEC remains unknown. It is common for companies to disconnect critical systems in the event of a network intrusion, as part of a larger effort to stop the badness from spreading elsewhere. Sometimes disconnecting everything actually does help, or at least helps to keep the attack from spreading to partner networks. But it is those same connections to partner companies that raises concern in the case of TTEC’s ongoing outage.

In the meantime, if you’re unlucky enough to need to make a customer service call today, there’s a better-than-even chance you will experience….wait for it…longer-than-usual hold times.

This is a developing story. Further details or updates will be noted here with a date and time stamp.

Update, 5:37 p.m. ET: TTEC responded with the following statement:

TTEC is committed to cyber security, and to protecting the integrity of our clients’ systems and data. We recently became aware of a cybersecurity incident that has affected certain TTEC systems.  Although as a result of the  incident, some of our data was encrypted and business activities at several facilities have been temporarily disrupted, the company continuous to serve its global clients. TTEC immediately activated its information security incident response business continuity protocols, isolated the systems involved, and took other appropriate measures to contain the incident. We are now in the process of  carefully and deliberately restoring the systems that have been involved.

We also launched an investigation, typical under the circumstances, to determine the potential impacts.  In serving our clients TTEC, generally, does not maintain our clients’ data, and the investigation to date has not identified compromise to clients’ data. That investigation is on-going and we will take additional action, as appropriate, based on the investigation’s results. This is all the information we have to share until our investigation is complete.

Paying bills is rarely fun or easy, but if you know where to look, it can be done for free. Electronic bill payment not only eliminates the need to pay for postage, but it also makes the task easier and may help prevent costly mistakes. Since no one wants to pay extra to manage bills online, it's useful to know the best ways to pay your bills online for free and how to set up these services.

Use Online Bill Pay Through Your Bank

The best way to pay bills online for free is probably your bank or credit union. If you have a checking account, it’s likely that your financial institution offers online bill pay as a free service. Paying from your bank means that your bank initiates the money transfer.

The process for how to set up online bill payment services is simple. You'll need to supply your bank with information about each payee (to whom you're sending money) to have the bank send electronic payments (or checks) in the amount and on the date of your choosing.

Using your bank is a great way to pay bills for regular monthly expenses like utilities on time while maintaining control over the process. You can have recurring payments sent automatically on a schedule or make one-time payments when the need arises. And if you need to stop paying or pay from a different account, all you have to do is log in to your bank account and make the necessary changes.

But as convenient as online bill pay is, it comes with a few drawbacks. If you initiate a payment without the necessary funds in your checking account, you could incur overdraft fees amounting to around $34 per transaction at large banks and credit unions. Likewise, if you set up a recurring payment and the amount increases, you'll pay less than the full amount owed and may face underpayment fees from the payee.

Pay Bills Through ACH Debit Payments

Sometimes, it's easier to have your payee pull funds from your bank account. This is especially the case if the amount you pay changes every month. Most service providers (i.e., mortgage, insurance, and utility companies) let you pay your bill for free by setting up ACH debit payments. These are electronic payments that move from one bank to another through the Automated Clearing House network (ACH).

With this approach, you supply the service provider with your checking account information and grant them permission to take the money as needed. They'll withdraw money directly from your checking account each time a payment is due (once a month, for example), with no involvement on your part. The modern ACH network allows payments to clear on the same day or the day after they were initiated.

Like online bill pay, ACH debit payments are one of the best ways to pay ongoing bills online and avoid late payments. But it takes slightly less work each month to pay bills via ACH because service providers have direct access to your bank account. As an added benefit, some lenders offer a lower interest rate on loans you repay through automatic debit payments.

The risks of this payment method are similar to those you take with online bill pay, although you have less control over the payment date with ACH debit payments. While rare, payees may accidentally take too much or pull funds at a bad time (when your account is empty, for example), resulting in overdraft charges.

Use Free Bill Pay From a Third Party

Several financial services companies also offer online bill pay. The service is similar to online bill pay through your bank except you use software or mobile apps to pay bills.

You can set up bill pay in the same way you would online bill pay through your bank by creating a list of payees. You can also have payments sent electronically or by check.

The main advantage of this type of bill pay is that it may be included with a third-party service you already use for budgeting or tracking investments. For example, if you use Quicken for budgeting, it may be more convenient to use Quicken Bill Manager than online bill pay through your bank to make payments online.

That said, this type of bill pay isn't always truly free, or even inexpensive. You may need a premium subscription to use bill pay at no added cost. Or, you may only get free bill pay for a limited time.

However, there are some truly free bill-pay services, too. For example, MyCheckFree lets you pay electronic bills to select service providers at no cost. While the service allows you to make payments to hundreds of businesses, not all companies you do business with may be contracted with MyCheckFree. This means you'll have to come up with alternative arrangements to pay these companies.

All Bmobile and Digicel customers, pre-paid and post-paid, who have a Republic Bank account or a credit card from any bank.

What is needed to register for Yooz?

• A Republic Bank account or a credit card from any bank
• One form of valid pay t&tec bill ID for verification of credit card customers
• A mobile phone number (pre-paid or post-paid)

Register at any: Republic Bank branch, all FLOW payment centres and select Digicel stores in Trinidad and Tobago.

How Secure is Yooz?
Pay t&tec bill is protected by a unique 4 digit passcode which is created by the user during the registration process. Without it, no one can access your account even if your phone is lost.

• Pay your utility bills
• Credit your phone or a friend’s phone directly from your mobile device
• Password protected transactions
• Use Yooz for FREE!