IT SYSTEM. A ransomware attack on the IT provider Tietoevry affects Primula, the the personnel administration system used by the university. At this stage, it is not possible to say how the attack affects the university, but to ensure that a possible virus cannot spread further the university has broken the connection with Primula.
On the night between Friday 19 and Saturday 20 January, Tietoevry, an IT subcontractor, discovered that they had been subjected to a ransomware attack. The attack has affected Swedish companies as well as municipalities and authorities, and since Tietoevry is the system supplier of Primula, the University of Gothenburg is also affected by the attack.
Primula is closed until further notice so that troubleshooting and measures can be taken. This means that, at the moment, you cannot log in and work in the system.
Payment of salary will not be affected
The attack will not affect the payment of the salary on January 25, as the basis for the payment was sent to the university’s bank before the attack began.
Measures has been taken
Tietoevry communicates that they have taken immediate measures at the highest level to investigate, mitigate and restore the situation effectively. It is not yet possible to say how long this will take.
Over the weekend, the university has taken security measures. This means, among other things, that integrations from and to Primula have been broken to ensure that the university is not further affected by the attack. These measures affects several other systems, including Datalagret (which collects data from the economic, personnel and student systems), POP (the university’s system for person and organizational data) and the incident reporting system IA.
If you have urgent enquries, please contact personalenheten@gu.se.