Surviving and Recovering from the SafePay Ransomware Attack

On July 3, 2024, Ingram Micro woke up to ransom notes on employee devices. The SafePay group had compromised the company through its GlobalProtect VPN, and operations went dark in the US, Europe, and Asia. By July 8, systems were being restored. CEO Paul Bay later spoke publicly about the recovery as a defining cultural moment. This module covers what happened, how Ingram responded, and why every candidate should be ready to discuss resilience under crisis.