WS Audiology (WSA), Widex va Signia kompaniyalarining bosh kompaniyasi, kiberxavfsizlik hodisasini cheklash uchun tanlangan tizimlarni oflayn rejimga o'tkazgandan so'ng, o'z ichki IT infratuzilmasiga ruxsatsiz kirish bo'yicha tekshiruv o'tkazmoqda.
Buzilish mijoz ilovalari va professional xizmatlarga ta'sir qildi, garchi kompaniya eshitish apparatlarining o'zi ta'sirlanmaganini aytgan bo'lsa-da. Uning 30-oktabr yangilanishi global IT hamkorlari bilan muvofiqlashtirilgan bosqichma-bosqich tiklanishni tasvirladi.
Ommaviy bayonot "ma'lum IT tizimlari"ga kirishni tasdiqlaydi, lekin buzilgan mijozlar bilan munosabatlarni boshqarish (CRM) platformasini aniq ko'rsatmaydi.
Shuning uchun kirishning aniq doirasi, jumladan ta'sirlangan ma'lumotlar bazalari va mijoz yozuvlarining har qanday ochilishi, tasdiqlanmaganligicha qolmoqda. Bu farq tasdiqlangan operatsion buzilishni hujumchilarning kirishi haqidagi kengroq da'volardan ajratib turadi.
WSA o'z biznes operatsiyalari va asosiy xizmatlari davom etganini, uzilishlar ehtiyot chorasi sifatida o'chirishlardan kelib chiqqanini aytdi.
Texnik jamoalar tekshiruv davomida ham ichki, ham mijozlarga mo'ljallangan tizimlarni uzib qo'yishdi, so'ngra xizmatlarni ustuvor tartibda tiklashni boshladilar.
Kompaniya hodisani o'z IT muhitiga bog'ladi, bulutga asoslangan eshitish dasturidagi xavfsizlik kamchiligiga emas.
Eshitish parvarishi mutaxassislari tomonidan moslashtirish va nozik sozlash uchun ishlatiladigan Widex Compass Cloud proaktiv ravishda oflayn rejimga o'tkazildi va 30-oktabr yangilanishiga ko'ra to'liq funksionallikka qaytdi.
WSA mutaxassislar endi Widex Allure va Allure AI qurilmalarini odatdagidek moslashtirishlari mumkinligini aytdi. Vakil Compass Cloud to'xtab qolganligi uchun emas, balki cheklash maqsadida uzib qo'yilganini ta'kidladi.
Widex MOMENT ilovasi iste'molchilarga eng katta ta'sir ko'rsatdi. WSA 31-oktabr — 1-noyabr dam olish kunlari davomida tiklanishni kutdi, Signia TeleCare esa keyingi haftaning boshida qaytishi rejalashtirildi.
HearingTracker tadqiqotchilari aytishicha, 30-oktabrda e'lon qilingan tiklanish maqsadlari, har ikki xizmat keyinchalik qayta ishga tushganini tasdiqlamaydi. TeleCare uzilishiga qaramay, standart Signia moslashtirish va nozik sozlash mavjud bo'lib qoldi.
Bu raqamli muhitda to'liq to'xtash emas, balki qisman uzilishni ko'rsatadi.
Amplifikatsiya davom etgan bo'lsa-da, ba'zi MOMENT foydalanuvchilari afzal ko'rgan tinglash dasturlariga va ilova asosidagi boshqaruvlarga kirishdan mahrum bo'lishdi.
WSA shuningdek, barcha elektron tijorat saytlari ishlayotganini va joriy buyurtmalar qayta ishlanib, jo'natilayotganini xabar qildi.
HearingTracker forum muhokamasida bir o'qituvchi sinf xonasi oldindan sozlamasini tanlay olmaganini xabar qildi.
Boshqa ishtirokchilar server bilan aloqa xatolarini tasvirlab, mavjud bo'lmagan qo'llab-quvvatlovchi xizmatlar tibbiy qurilmaning o'zini o'chirmasdan shaxsiylashtirishni qanday cheklashi mumkinligini ko'rsatdilar.
Ba'zi iPhone foydalanuvchilari Apple'ning o'rnatilgan eshitish qurilmasi sozlamalari orqali cheklangan dastur kirishini saqlab qolganini xabar qildilar.
Bu hisoblar individual tajribalarni tasvirlaydi, universal tasdiqlangan yechim emas. Hisobotlar shuningdek, kirishning texnik sababini aniqlamaydi yoki eshitish apparatlarining buzilganini isbotlamaydi.
So'nggi hodisa 2024-yil 5-iyulda aniqlangan alohida WSA buzilishidan keyin sodir bo'ldi. Bu kirish Avstraliya va Yangi Zelandiyadagi Bloomhearing'ning mahalliy chakana savdo IT tizimiga ta'sir qildi, jumladan Gonkong va Singapur bilan bog'liq ma'lumotlar.
WSA bemor va xodim ma'lumotlariga vaqtinchalik ruxsatsiz kirishni tasdiqladi va hujumchilar ma'lumotlarni nusxalashi mumkinligini aytdi, garchi zaxira nusxalari ma'lumot yo'qotilishini oldini olgan bo'lsa-da. Boshqa WSA tizimlari ta'sirlanmadi.
Sektor shuningdek, ransomware bilan bog'liq jiddiy buzilishlarga duch keldi. Demantning 2019-yilgi yillik hisoboti keng tarqalgan IT o'chirishlarini majbur qilgan hujumdan sug'urta qilinganidan so'ng operatsion foydaga DKK 550 million salbiy ta'sirni hujjatlashtirdi.
Bu oldingi holat potentsial oqibatlarni ko'rsatadi, lekin WSA'da ransomware ishtirokini aniqlamaydi.
30-oktabrdagi bayonotda hech qanday hujumchi, zararli dastur oilasi, dastlabki kirish usuli yoki tasdiqlangan ma'lumot o'g'irlanishi aniqlanmagan; bular hal qilinmagan savollar bo'lib qolmoqda.
WS Audiology (WSA), the parent company of Widex and Signia, is investigating unauthorized access to its internal IT infrastructure after taking selected systems offline to contain a cybersecurity incident.
The disruption affected customer applications and professional services, although the company said hearing aids themselves remained unaffected. Its October 30 update described a phased restoration coordinated with global IT partners.
The publicly available statement confirms access to “certain IT systems,” but does not specifically identify a compromised customer relationship management (CRM) platform.
The precise scope of the intrusion, including affected databases and any exposure of customer records, therefore remains unconfirmed. That distinction separates verified operational disruption from broader claims about the attackers’ access.
WSA said its business operations and core services continued, with interruptions resulting from precautionary shutdowns.
Technical teams disconnected both internal and customer-facing systems while investigating, then began restoring services in a prioritized sequence.
The company attributed the incident to its own IT environment rather than a security flaw in its cloud-based hearing software.
Widex Compass Cloud, used by hearing care professionals for fitting and fine-tuning, was taken offline proactively and had returned to full functionality by the October 30 update.
WSA said professionals could again fit Widex Allure and Allure AI devices normally. A spokesperson emphasized that Compass Cloud was disconnected for containment, not because it had stopped functioning.
The Widex MOMENT application experienced the most significant consumer-facing disruption. WSA expected restoration over the October 31–November 1 weekend, while Signia TeleCare was scheduled to return early the following week.
HearingTracker Researchers said that, recovery targets announced on October 30, not confirmation that either service subsequently resumed. Standard Signia fitting and fine-tuning remained available despite the TeleCare outage.
This indicates a partial interruption across its digital environment rather than a complete suspension of commercial operations.
Although amplification continued, some MOMENT users lost access to preferred listening programs and app-based controls.
WSA also reported that all e-commerce siteswere functional and that current orders continued to be processed and shipped.
In a HearingTracker forum discussion, a teacher reported being unable to select a classroom preset.
Other participants described server communication errors, illustrating how unavailable supporting services can restrict personalization without disabling the underlying medical device.
Some iPhone users reported retaining limited program access through Apple’s built-in hearing-device settings.
These accounts describe individual experiences, not a universally validated workaround. The reports also do not establish the intrusion’s technical cause or prove that hearing aids were compromised.
The latest incident follows a separate WSA breach identified on July 5, 2024. That intrusion affected Bloomhearing’s local retail IT system in Australia and New Zealand, including data associated with Hong Kong and Singapore.
WSA confirmed temporary unauthorized access to patient and employee information and said attackers might have copied data, although backups prevented data loss. Other WSA systems were unaffected.
The sector has also suffered substantial ransomware-related disruption. Demant’s 2019 annual report documented a DKK 550 million negative operating-profit impact after insurance from an attack that forced widespread IT shutdowns.
That precedent demonstrates potential consequences, but does not establish ransomware involvement at WSA.
Its October 30 disclosure identified no attacker, malware family, initial-access method, or confirmed data exfiltration; those remain unresolved questions.
Stops Cyber threats before impact with 21 min faster MTTR. Integrate ANYRUN’s Sandbox in your SOC.