Sensitive Data Breach Targets Firms Including British Airways, Boots, and BBC

A Russian-speaking criminal organization has exposed the personal data of tens of thousands of workers at some of the biggest corporations in Britain. Software used by UK payroll service Zellis was impacted by the incident. Employees’ identities, birthdates, and National Insurance numbers were potentially compromised; British Airways, Boots, and the BBC issued warnings. The breach highlights the increasing susceptibility of businesses to online attacks that target holes in the software supply chain. For improper data management, UK businesses can be fined up to 4% of their annual income.

Because of its popularity and slower regulatory disclosure, researchers at Secureworks expect that the Clop hacking organization will target businesses in the US, Canada, and India. The organization is well recognized for making the assaults more profitable by taking advantage of flaws in secure file-transfer software. In order to comprehend the prevalence of ransomware in government agencies and key infrastructure, the US Cybersecurity and Infrastructure Security Agency is collaborating with the FBI. With gangs concentrating on hacking and leak operations, businesses are depending on backups to fend off ransomware assaults. John Hultquist, an analyst at Mandiant Intelligence, foresees a temporary increase in incursions.
Within criminal gangs, vulnerabilities are frequently discussed, with Russia being a significant target. A flaw in MOVEit’s software has led to the company’s involvement with law enforcement and specialists.