Tietoevry are still trying to recover from ransomware over a month in. Some customers who paid for managed backups have no backups, apparently.
I’m quite confused by their statement they don’t know initial access point - they run Cisco AnyConnect VPN in that data centre and probably want to check their access logs.
https://mastodon.acc.sunet.se/@maswan/111931139599220350