Garmin has been hacked

[JoeBlow]

Apparently the Garmin servers have been hacked and all services are currently unavailable. Is anyone else experiencing problems?

Al

 

[wepn]

Apparently the Garmin servers have been hacked and all services are currently unavailable. Is anyone else experiencing problems?

Al

Yes not mentioned in their press release, it's a ransomware attack with a $10m demand.

Bike apps are one thing but multiple flyGarmin services used by aircraft pilots are also down, including the flyGarmin website and mobile app, Connext Services - weather, CMC, and position reports as well as Garmin Pilot Apps.

 

[Sherman]

Today I was able to upload my weekend rides and they synced to Strava too. Not everything is working in Garmin Connect app though.

 

[Akiwi]

I still get the error "Sorry, we are down for maintenance. Check back shortly."
It started onWednesdy, ao they have been offline for 5 days now.That is a serihs hack. i also read that about the $10m Ransomware demand. Holy cow they must be pannicking.
Pretty bad communication from them. I haven't seen anything official

 

[wepn]

Find the Backup

 

[Rikster]

It's almost working again, Garmin Connect | Status

 

[Akiwi]

Hmm. But I can't connect over my telephone to upload anything, so still pretty useless.

 

[Quinterly]

I used a Vivoactive as a silent alarm not to wake up my wife in the mornings and I couldn't even get it to sync to change the alarm time ... never occurred to me that changing the alarm time required Garmin servers which gives me pause to think about what they're doing with that data.

 

[MrSimmo]

Gotta love good old EvilCorp ?

 

[Rikster]

Hmm. But I can't connect over my telephone to upload anything, so still pretty useless.

My Phone din't work/connect, but if I use my mac's (macbook or mini) I can upload my workouts.

 

[Akiwi]

I see some things have been uploaded.. like the bike tour I did on Sunday, but others haven't like sleep data etc.

 

[Janc]

So what os peoples view on what may have been slurped in the hack and how vulnerable Garmin users are?

 

[MrSimmo]

So what os peoples view on what may have been slurped in the hack and how vulnerable Garmin users are?

Garmin outage caused by confirmed WastedLocker ransomware attack

Wearable device maker Garmin today had to shut down some of its connected services and call centers following what the company calls a worldwide outage.

www.bleepingcomputer.com

I spoke with some of the team over at Garmin; general view is data was not exported/taken from services; it is being treated currently as a data access issue rather than a data theft issue - i.e. none. How true that is, we'll only find out from a leak or in time if any comes out.

There are, however, lots of security weaknesses in the Garmin platform (lack of multi factor authentication (i.e. it texts you a code as well as a password for example), lack of secure password management, and various employees with way too much access for their job role. So, unrelated to that hack - 'very' is the simple answer...