Cybersecurity incident — 2018-12-23 00:00:00
Affected organization: British Post Office
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Public Administration
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Undetermined
Actor: Islamic Revolutionary Guard Corps (APT 35 Charming Kitten)
Actor type: Nation-State
Actor country: Iran (Islamic Republic of)

A threat actor compromised the British Post Office and local government networks, stealing personal data including email addresses and mobile phone numbers of thousands of employees.