Ukraine official: Worm likely hit 1 in 10 state, company PCs

A Ukrainian government official estimates that as many as one in 10 personal computers at companies and government offices across the country may have been compromised in the cyberattack that erupted on June 27.

Dmytro Shymkiv, the deputy head of Ukraine's presidential administration and a former director of Microsoft Ukraine, told The Associated Press the figure was a "guesstimate" based on publicly available data, his previous work in the technology industry and what he'd heard from business and government sources. He added that the figure did not include line of business computers such as cash machines.

Nine days after the malicious software, sometimes called a worm, was seeded across Ukrainian companies and government agencies by a weakly secured tax software firm, officials have yet to provide a comprehensive assessment of what happened. There have been hints: the firm behind the rogue tax software told journalists yesterday that its program was present on 1 million machines, while Ukraine's infrastructure minister told AP damage at his department alone ran into the millions of dollars.
 

Cybersecurity expert Victor Zhora, who is helping several clients affected by the attack, today called Shymkiv's figure "rather realistic," adding that he alone was aware of infections on between 2,500 to 3,000 devices. Companies around the world that were likewise affected by the attack, including the world's biggest shipper and Russia's main oil producer, are also tallying the harm done.

Today, British consumer goods company Reckitt Benckiser warned that the cyberattack, which disrupted its ability to both manufacture and distribute products, would hurt its overall earnings. It lowered its forecast for full-year net revenue growth to 2 percent, from 3 percent previously. "Some of our factories are currently still not operating normally but plans are in place to return to full operation," the company said in a statement to shareholders.