3 minute read
In The News
MOVEit Cyberattack
The BBC, British Airways, Boots and Aer Lingus all affected by a cyberattack.
Employees personal data including national insurance numbers and in some cases bank details may have been stolen.
First disclosed early June 2023 Progress Software company said “hackers had found a way to break into its MOVEit file transfer tool, that’s designed to move sensitive files securely”.
The cybercriminals will attempt to extort money from organisations rather than individuals.
As yet no ransom demands have been made public, but it is expected cybercriminals will start emailing affected organisations with ransom payment demands.
Source – BBC
How to protect against a Cyberattack
To ensure your compliant with Data Protection laws, GDPR and to guard against a cyberattack:
- Provide employees with training on the types of cyberattacks – malware, phishing and ransomware etc. Give special importance on what they need to do, to avoid an attack, for example how to detect a suspect email and why they should not click on any suspect links.
- Have a cybersecurity incident management / response plan, that outlines your organisation’s procedures, steps, and responsibilities. This document should detail detecting an attack, cyberattack analysis, containment, eradication and recovery from an attack. You may want to include post incident actions, which will support any litigation activities, to show your auditors, and to capture knowledge and any lessons learned for continuous cybersecurity improvement.
In the event of a cyberattack, you should consider contacting Action Fraud the UK’s national fraud and cybercrime reporting centre.
Call Action Fraud on 0300 123 2040