Major UK-based companies, including British Airways, Boots, and the BBC, have alerted their employees about possible data breaches that occurred through their payroll provider, Zellis. British Airways, which employs around 35,000 people, reported that the attack had potentially led to the exposure of the names, surnames, dates of birth, and banking details of their employees. Boots, a pharmacy chain, with over 50,000 workers, also reported the leak of personal data of their staff. The BBC has confirmed that it was also affected by the attack on Zellis, but it is still trying to establish the extent of the breach.
The cyberattack happened through a third-party supplier of Zellis, called MOVEit, that was breached via its file transfer tool. The National Cyber Security Centre is investigating the matter to determine the impact in the UK. British Airways said that it is working with IAG's Group Security Operations Centre to ensure the containment of the issue and to prevent any misuse of information.
This recent data leak is the latest in a line of technology-related issues that have plagued British Airways in the recent past. Last month, hundreds of flights were cancelled due to a computer outage. In response, the company's Group Chief Executive Officer, Luis Gallego, assured that the company's tech problems are fixable, but it would take some time. IAG, the parent company of British Airways, is investing heavily in its tech infrastructure to avoid such incidents in the future. The current data breach only adds to the company's woes and highlights the need for heightened cybersecurity measures across diverse industries.