Southern Water reports major data breach impacting hundreds of thousands

Southern Water, a primary water utility agency throughout the South East of England, has launched a significant data breach, doubtlessly impacting between 235,000 and 470,000 of its prospects. The breach, which occurred in January, seen hackers accessing delicate purchaser information all through a cyberattack.

The company, serving 1000’s and 1000’s all through the world, disclosed that “5 to 10 p.c” of its purchaser base may want had their non-public data compromised. This estimate, based totally on ongoing forensic investigations, leaves room for the possibility that the number of affected folks may rise.

Particulars of the stolen data, as reported by BBC Info, embrace prospects’ dates of begin, nationwide insurance coverage protection numbers, checking account particulars, and reference numbers. Southern Water has however to substantiate the specifics of the compromised information.

Together with purchaser data, Southern Water revealed plans to inform all current and some former staff regarding the breach. The utility company, utilizing spherical 6,000 folks, stays to be investigating the whole extent of the incident.

The cyberattack was claimed by the Black Basta ransomware group, acknowledged for its hyperlinks to Russia and former assaults on fundamental organizations identical to the U.Okay. outsourcing giant Capita. Shortly after the assault, Black Basta listed Southern Water on its darkish web leak web site, threatening to launch 750 gigabytes of delicate firm and purchaser data till a ransom was paid. The leak web site’s itemizing included screenshots of stolen paperwork, just like employee passports and id enjoying playing cards.

As of now, Southern Water’s title has been away from Black Basta’s website online, a switch often seen after sufferer companies alter to ransom requires. However, Southern Water has not disclosed whether or not or not it paid any ransom.

Consistent with TechCrunch, in response to the breach, Southern Water acknowledged it is collaborating with cybersecurity consultants to look at the darkish web for any indicators of the stolen data being revealed. To this point, the company evaluations no proof of the compromised data displaying on-line.

The incident has been reported to the U.Okay.’s Knowledge Commissioner’s Office, as Southern Water continues to judge the breach’s have an effect on and work on bolstering its cybersecurity measures to forestall future assaults.