Outsourcing company Capita has admitted that it's been hit with a cyberattack that led to a data breach.
The attack affected 4% of the company's server capacity.
-
It is believed that the hacker group stole data such as:
- customer information,
- supplier information,
- and company employee data.
- On March 31, 2023, Capita disclosed an IT issue that impacted its services. Three days later, the company announced that the outage was caused by a cyberattack that prevented access to its internal Microsoft Office 365 applications.
- At the time, Capita did not provide many details about the nature of the cyberattack.
- According to the company statement, the initial breach occurred on March 22, 2023, and was not stopped until March 31.
- On April 17, 2023, the Black Basta ransomware gang claimed on its portal that it had breached and threatened to sell stolen data unless the company pays a ransom.
-
Black Basta posted data such as:
- personal bank account details,
- physical addresses,
- passports, etc.
- The Black Basta ransomware group was first tracked in 2022. Believed to be based in Russia, the group breached over 20 victims in just two weeks.
- Most of its targets are large manufacturing and healthcare organizations that have over $100M in revenue and are located in the U.S., Canada, New Zealand, and Australia.
- Researchers have also speculated that the group may be a branch of the Conti ransomware group.