Sangoma Technologies Provides Update Regarding Data Breach

MARKHAM, Ontario, Dec. 29, 2020 (GLOBE NEWSWIRE) -- Sangoma Technologies Corporation (TSXV: STC), a trusted leader in delivering cloud-based Communications as a Service (“CaaS”) solutions, today provided an update regarding its investigation into the data breach announced on December 24, 2020.

To date, the Company’s investigation has confirmed that the attackers encrypted, copied and published a significant number of confidential files relating to the Company’s financial information, its corporate development and M&A efforts, certain private employee data, as well as certain customer information and ordering history. While Sangoma’s investigation is still ongoing, there is currently no evidence that the compromised customer information includes bank account or payment card data.
        
The Company believes strongly that customers’ ability to use Sangoma products and services continues without interruption or issue. To date, the investigation has also uncovered no evidence that any of the Company’s products or services have been impacted by this cyber attack, nor is there any evidence that the code inside Sangoma’s products has been compromised or that the use of the products would create a security risk to a customer’s business. Nevertheless, as announced previously, and out of an abundance of caution, the Company continues to recommend that customers change their Sangoma passwords and that they continue to practice good security hygiene, including limiting remote access to only that which is necessary and monitoring for unauthorized access attempts.

Sangoma has taken immediate action to mitigate and manage the impact of this attack. The Company has retained a deeply experienced team of top third-party cybersecurity experts, is filing a report with law enforcement officials, and has also deployed additional security measures to assist in detecting and preventing any future attempts or incidents of unauthorized access to or malicious activity on its corporate network. The Company has also promptly notified all its employees of the incident and the possible impact on the security of their personal data, has provided them with actions they can take to protect that personal information from theft and misuse, and is putting in place 24 months of credit and dark web monitoring at the Company’s expense.