1800 PT: The security updates were deployed successfully. Command Center and Conveyance access is now restored and all systems are functioning as expected. On your first login, you will need to click the forgot password link and setup a new password. Incident is now closed.
1615 PT: We have confirmed that the Cook Command Center website was targeted with malicious activity from an external source and due to our layered security was NOT able to gain access to any accounts. As is appropriate, once this activity was detected, all external accounts were disabled while we investigated. We will be deploying additional security updates to further defend against this sort of activity before we allow external access. We will provide additional updates once we are ready to restore access. We appreciate your patience. Next update by 0800 PT Tuesday 9/22/26.
1540 PT: Confirming, Command Center and Conveyance accounts are linked so Conveyance access is also affected. Next update by 1700 PT.
1515 PT: We are still working on the login issues with Command Center. Next update by 1700 PT.
1130 PT: Our team is still investigating the cause of the login issues with Command Center. It is only external logins that are affected, Support and other CSG teams are able to receive CC ticket requests. All other Command Center services are online and operating as expected. If you need support you can email support@cooksolutionsgroup.com or call 844-305-2665. Next update by 1500 PT.
1030 PT: We are still investigating the cause of the interruption with Command Center and apologize for the delay. Next update by 1130 PT.
0930 PT: We are still investigating the login issue. Next update by 1030 PT.
0830 PT: We are aware of an issue affecting Command Center login requests preventing users from signing in. Our team is aware of the issue and is currently investiating. Next update by 0930 PT.
We have received multiple reports of an increase Man in the Middle (MITM) attacks targeting ATMs in the Pacific Northwest and across the United States. All ATM manufacturers are susceptible to this type of attack which targets the physical network infrastructure. A key difference with this current round of MITM attacks is they can defeat basic TLS 1.2.
We recommend the following actions are taken immediately:
· Verify top hat of ATM is alarmed and create a response plan for active alarms to include historical footage review.
· Contact your ATM Host to confirm availability of TLS 1.2 Enhanced.
· Confirm BIOS and firmware are up to date with the latest security releases.
· Verify HDE encryption is enabled on all ATMs.
· Inspect for tampering daily.
· Increase monitoring through Command Center or other remote management tools.
· Report any suspicious activity to the NOC immediately.
These attacks are highly coordinated and often occur after hours. Quick reporting and verification of system integrity are critical in preventing losses. For RVATM users you can confirm HDE, BIOS version and TLS 1.2 Enhanced via Command Center. If you have any questions, please open a ticket with our Support team by visiting cc.cooksolutionsgroup.com or via email at Support@cooksolutionsgroup.com.