Southern Water, a number one water utility firm within the South East of England, has introduced a major data breach, doubtlessly impacting between 235,000 and 470,000 of its prospects. The breach, which occurred in January, noticed hackers accessing delicate buyer info throughout a cyberattack.
The corporate, serving thousands and thousands throughout the area, disclosed that “5 to 10 p.c” of its buyer base may need had their private data compromised. This estimate, primarily based on ongoing forensic investigations, leaves room for the chance that the quantity of affected people might rise.
Particulars of the stolen data, as reported by BBC Information, embrace prospects’ dates of start, nationwide insurance coverage numbers, checking account particulars, and reference numbers. Southern Water has but to verify the specifics of the compromised info.
Along with buyer data, Southern Water revealed plans to tell all present and a few former workers concerning the breach. The utility agency, using round 6,000 people, continues to be investigating the complete extent of the incident.
The cyberattack was claimed by the Black Basta ransomware group, recognized for its hyperlinks to Russia and former assaults on major organizations just like the U.Okay. outsourcing big Capita. Shortly after the assault, Black Basta listed Southern Water on its darkish internet leak website, threatening to launch 750 gigabytes of delicate company and buyer data except a ransom was paid. The leak website’s itemizing included screenshots of stolen paperwork, equivalent to worker passports and id playing cards.
As of now, Southern Water’s identify has been faraway from Black Basta’s web site, a transfer typically seen after sufferer corporations adjust to ransom calls for. Nonetheless, Southern Water has not disclosed whether or not it paid any ransom.
In keeping with TechCrunch, in response to the breach, Southern Water said it’s collaborating with cybersecurity consultants to observe the darkish internet for any indicators of the stolen data being revealed. To date, the corporate reports no proof of the compromised data showing on-line.
The incident has been reported to the U.Okay.’s Data Commissioner’s Workplace, as Southern Water continues to evaluate the breach’s influence and work on bolstering its cybersecurity measures to forestall future assaults.
