On September 04, 2020 starting at 12:05 UTC and lasting until 13:15 UTC, partners with PSA databases in the LON datacenter experienced a service interruption which caused an error page to be displayed instead of the normal login page. Users with established connections would have received errors and would have been disconnected from their session.
The root cause for this service interruption was a Distributed Denial of Service (DDOS) attack on an IP block that is advertised, but not owned by SunGard Availability. SunGard Availability does maintain active DDOS filters to mitigate against DDOS attacks, but the existing process only accounts for IP blocks that SunGard owns. While traffic on the affected links returned to a normal state prior to SunGard Availability performing any remediation actions, the affected IP block was added to the DDOS filters. Additionally, SunGard Availability is reviewing all of their DDOS filters against advertised IP blocks in all of their data centers to ensure that IP ranges are added as needed. SunGard Availability will also review their Change Management process to ensure that there are no gaps in configurations moving forward.