Boots, BA, BBC staff hit by cyber attack on payroll provider

The personal details of thousands of employees at British Airways, BBC and Boots may have been stolen following a suspected Russia-linked cyber attack on Zellis, the firms’ payroll systems provider. The stolen data may include names, addresses, national insurance numbers, and banking details. The cyber attack, linked to a Russian-speaking cybercrime gang called Clop, exploited a vulnerability in the MOVEit software used by Zellis. Eight of Zellis’ customers have been affected.