LucidLink experienced a significant cyberattack that was first detected on April 29, 2024, leading to an immediate impact on their metadata services, which are essential for accessing filespaces. The company responded swiftly by disconnecting the affected systems and initiating a thorough investigation with the help of third-party cybersecurity specialists. Despite the initial disruption, LucidLink confirmed that the backup systems were unaffected, which allowed them to use these systems to restore full access to filespaces. However, there was a possibility of some data loss for work done since the last system backup.
The restoration process involved rebuilding the metadata infrastructure, a critical component for filespace connectivity. This process was carried out in two main steps: constructing the infrastructure anew and restoring each filespace from backups. LucidLink estimated this recovery would take between 6 to 8 hours and worked to accelerate the timeline. By the afternoon of April 30, they had made significant progress, reconnecting unaffected filespaces manually and restoring others in a rolling manner to expedite the process.
Throughout the ordeal, LucidLink kept its users informed through regular updates. They advised users to monitor their connection status through the LucidLink app and to be cautious of any unsolicited communications that could relate to phishing attempts. Additionally, the company took preventive measures by advising users to save any work done during the outage to a local disk, ensuring no critical data was lost irretrievably.
By May 1, 2024, LucidLink announced that the restoration of the filespace metadata service was largely complete, with the vast majority of filespaces back online. A small number of cases requiring manual intervention remained, for which the company promised continued support and individual follow-up. This incident underscored the importance of robust cybersecurity measures and effective incident response strategies for safeguarding critical digital infrastructure and maintaining trust among users.