Cybersecurity incident — 2020-12-11 00:00:00
Affected organization: Subway
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Accommodation and Food Services
Event type: Mixed
Event subtype: Exploitation of Application Server,Internal Denial of Service
Motive: Financial
Actor: Undetermined
Actor type: Criminal
Actor country: Undetermined

Subway UK that a hacked system used for marketing campaigns was used for distributing phishing emails sent out to customers. The emails distributed Excel documents laden with the latest version of the Trickbot malware.