Just just a few days earlier than Christmas, I broke information that The Guardian newspaper had suffered what turned out to be a ransomware assault, forcing workers to make money working from home.
I’ve been advised that @guardian has suffered a “severe IT incident” which is affecting entry to all its places of work.
Staff are being advised to make money working from home, and to not use VPN to log in to any techniques… 🙁
Wishing the Guardian IT staff properly, particularly at the moment of 12 months. pic.twitter.com/d31YOkmwoY
— Graham Cluley 🇺🇦 (@gcluley) December 21, 2022
Three weeks have now handed, and though the revered UK newspaper has continued to be printed and its web site remained on-line all through, there isn’t simply excellent news to report.
Yesterday, workers on the 200-year-old information organisation have been despatched an electronic mail that warned them that the continuing investigation into the assault had uncovered that hackers had gained entry to recordsdata containing workers’s private data.
According to the e-mail, knowledge accessed consists of:
- names
- addresses
- dates of start
- National Insurance numbers
- checking account particulars
- wage data
- and id paperwork corresponding to passports.
Yeuch.
The Guardian knowledgeable its workers that it had “had seen no evidence that personal data has been exposed online, and so the risk is low. We are continuing to monitor for this.”
We realise this information could also be very worrying for everybody, and we need to say how sorry we’re for any anxiousness this may occasionally now trigger. But now that we’ve confirmed there’s a danger, we’ll do every thing we are able to to help workers…
The Guardian contacted the Information Commissioner’s Office (ICO) earlier this month to report the incident. Organisations are required to inform the ICO of any knowledge breaches inside 72 hours of turning into conscious of it.
Found this text fascinating? Follow Graham Cluley on Twitter or Mastodon to learn extra of the unique content material we put up.