Several major organizations, including British Airways, Boots, and the BBC, have confirmed that tens of thousands of their employees had their personal data exposed in a widespread breach linked to a popular file transfer tool. The breach occurred at Zellis, the payroll provider for these organizations, as well as the provincial government of Nova Scotia in Canada. Both Zellis and the Nova Scotia government reported that the data exposure was a result of their use of the MOVEit file transfer software. The exact number of affected customers has not been disclosed by Zellis. British Airways, Boots, and the BBC have taken immediate action to notify and provide support to the affected individuals. The BBC stated that they are working closely with Zellis to investigate the extent of the breach. The security concerns surrounding MOVEit were heightened when Progress Software, the maker of the software, disclosed a vulnerability that could allow hackers to intercept exchanged data. Microsoft has attributed the hacks to a group known as “Lace Tempest,” who are associated with the cl0p ransomware site. The cl0p team confirmed their responsibility for the breaches and threatened to name victims who refuse to pay on their website. Boots has more than 50,000 employees in the UK, while British Airways and the BBC employ approximately 30,000 and 21,000 people, respectively.
British Airways and the BBC have been targeted in a file transfer hack
