British Airways (BA) has confirmed that its entire UK-based workforce has been affected by a cyberattack that exposed private data, including financial institution and contact details. The incident is linked to a zero-day vulnerability in Progress Software’s MOVEit file switch system, which was exploited by hackers to entry information from varied international firms using the platform. Thousands of corporations are believed to be impacted by the breach.
UK payroll supplier Zellis disclosed that eight of its clients were amongst those affected, without naming the organisations. BA, which employs 34,000 folks in the UK, acknowledged its involvement within the cybersecurity incident. Boots, with a workers of 50,000, also confirmed it had been affected. The Telegraph newspaper reported that the BBC was among the many organisations caught up within the hacking, which is being linked to a Russia-based group.
The compromised information consists of contact details, national insurance coverage numbers, and bank particulars. BA advised Sky News: “We have been informed that we’re one of the companies impacted by Zellis’ cybersecurity incident which occurred by way of one of their third-party suppliers called MOVEit.”
Printable supplies payroll support services to hundreds of corporations in the UK, of which BA is one. “This incident occurred because of a new and beforehand unknown vulnerability in a broadly used MOVEit file switch device. We have notified those colleagues whose personal information has been compromised to supply support and advice.”
A Boots spokesperson stated: “A global data vulnerability, which affected a third-party software used by certainly one of our payroll providers, included some of our team members’ personal details. Our provider assured us that quick steps have been taken to disable the server, and as a priority we have made our team members aware.”
Zellis issued a statement: “A large variety of corporations all over the world have been affected by a zero-day vulnerability in Progress Software’s MOVEit Transfer product. We can confirm that a small number of our customers have been impacted by this global issue and we are actively working to support them.”