Case Study: Software and Services Provider restores cloud operations after breach with Palo Alto Networks Unit 42

Restoring a software and services provider’s cloud environment after a breach

A software and services provider was hit by the Lapsus$ threat actor, who locked the company out of its network and deleted its entire cloud environment, including email, bringing operations to a halt for more than a week. The company turned to Palo Alto Networks Unit 42 Incident Response services to help recover from the breach and restore access.

Palo Alto Networks Unit 42 investigated the attack, contained the breach, removed the threat actor, and helped restore the cloud environment while also improving security controls. As a result, business operations were restored, the cloud environment was secured against future attacks, and the customer’s defenses were strengthened.