Montrose Environmental: Ransomware Attack Issue Report – Form 8-K
Montrose Environmental Group releases statement on ransomware attack
LITTLE ROCK, Ark.-June 14, 2022–Over the past weekend, Montrose Environmental Group, Inc. (NYSE: MEG) determined that it was the target of an organized ransomware attack. Based on the information currently available to us, we believe the incident primarily affected computers and servers in our network of enthalpy analysis labs. The factual patterns of this attack, along with information from law enforcement and independent cybersecurity experts, lead us to believe that this attack was carried out by highly sophisticated malicious actors.
Upon discovery of the attack, we took immediate action, suspending all affected systems, notifying law enforcement, and activating the company’s global network of IT professionals and recovery protocols and data continuity, and engaging third-party experts to begin to remedy the situation. Based on the information available to us at this time, we do not believe our backup data and cloud-based business systems, including email, have been affected, and we are actively working to restore affected systems as soon as possible.
The full investigation and resolution of this incident will take time, and we anticipate that some lab results within our Enthalpy business will be delayed. However, we do not currently anticipate any major disruption to our other services and are in the process of notifying customers as appropriate of any delays or impacts due to the attack. If the investigation identifies access or other impacts to third party data or information, we will notify the relevant third parties and appropriate regulatory agencies.
Although we anticipate limited impact and rapid recovery from the attack, we are closely monitoring our networks with third-party security experts, and circumstances may change as we learn more about the incident. We sincerely apologize to customers of our laboratories and sites who have been or may be impacted by the consequences of this sophisticated cyber-attack.
Montrose is a leading environmental solutions company focused on supporting commercial and government organizations as they meet today’s challenges and prepare for what’s to come tomorrow. With more than 2,700 employees in more than 80 locations around the world, Montrose combines deep local knowledge with an integrated approach to design, engineering and operations, enabling the company to respond efficiently and effectively to requirements unique to each project. From comprehensive air measurement and laboratory services to regulatory compliance, emergency response, permits, engineering and remediation, Montrose provides innovative and practical solutions that enable its customers to meet to their immediate needs – and well ahead of the strategic curve. For more information, visit www.montrose-env.com.
This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. Forward-looking statements can be identified by the use of words such as “intends”, “expects” and “may” and other similar expressions that predict or indicate future events or are not statements of historical issues. Forward-looking statements are based on current information available at the time they are made and on management’s reasonable beliefs or expectations regarding future events, and are subject to risks and uncertainties, many of which are beyond the control of the Company, which could cause actual performance or results to differ materially from the belief or expectations expressed or implied by the forward-looking statements. Moreover, many of these factors are, and may continue to be, amplified by the COVID-19 pandemic. Other factors or events that could cause actual results to differ may also arise from time to time, and it is not possible for the Company to predict all of them. Forward-looking statements speak only as of the date they are made, and the Company undertakes no obligation to update any forward-looking statement to reflect future events, developments or otherwise, except as required by applicable law. required. Investors are encouraged to consult the Company’s filings with the Securities and Exchange Commission, including its Annual Report on Form 10-K for the fiscal year ended December 31, 2021, for additional information regarding the risks and uncertainties that could cause actual results to differ materially from those expressed in any forward-looking statement.