Cybersecurity incident — 2023-06-05 00:00:00
Affected organization: Zellis
Affected country: United Kingdom of Great Britain and Northern Ireland
Industry: Professional, Scientific, and Technical Services
Event type: Exploitive
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: cl0p
Actor type: Criminal
Actor country: Russian Federation

The BBC, British Airways (BA), Boots, and Aer Lingus confirm that the personal data of their staff has been exposed to hackers following a cyber incident impacting their payroll provider Zellis carried out exploiting the MOVEit CVE-2023-34362 Vulnerability