Ireland Aer Lingus staff data stolen in cyber attack on payroll provider
On 6 June 2023, reports said about 5,000 Aer Lingus staff had their data stolen in a global cyber attack on payroll provider Zellis, which confirmed that eight of its clients were affected. The attack reportedly began with hackers compromising the MOVEit Transfer software used by Progress Software, and is reportedly orchestrated by the Russian cyber-crime gang Clop. The stolen data includes names, dates of birth, addresses, email addresses and employment dates, and in most cases PPS or Social Security numbers, though Aer Lingus said no financial or bank details were compromised. No arrests, charges, court proceedings or sentences are reported, and the latest development is that the third-party provider and Aer Lingus notified the Data Protection Commissioner and the National Cyber Security Centre.
- Reported6 Jun
- Arrested
- Charged
- In court
- Verdict
- Sentenced
Key facts
consolidated from all reports- What happened
- About 5,000 Aer Lingus staff had their data stolen in a global cyber attack.
- Payroll provider Zellis confirmed that eight of its clients were affected, including Aer Lingus.
- British Airways, the BBC and Boots staff were also reportedly compromised.
- The stolen data includes names, dates of birth, addresses, email addresses and employment dates, and in most cases PPS or Social Security numbers.
- All current employees and a significant number of former employees were affected.
- Where
- The attack was described as global, and no specific location is given.
- When
- The case was reported on 6 June 2023, after Progress Software disclosed the MOVEit compromise the previous week.
- Cause
- Hackers reportedly found a way to compromise the MOVEit Transfer software used by Progress Software.
- Investigation
- The third-party provider and Aer Lingus notified the Data Protection Commissioner and the National Cyber Security Centre.
- Other details
- The attack is reportedly orchestrated by the Russian cyber-crime gang Clop, which is known for extorting industrial organisations with ransomware.
- Aer Lingus said no financial or bank details of its current or former employees were compromised.
- An ESET Ireland analyst said the stolen information could theoretically be used for identity theft.
10 statements extracted from the articles
- whatAbout 5,000 Aer Lingus staff had their data stolen in a global cyber attack. (irishmirror.ie)
- whatPayroll provider Zellis confirmed eight of its clients were affected, including Aer Lingus. (irishmirror.ie)
- whatBritish Airways, the BBC and Boots staff were also compromised. (irishmirror.ie)
- whatThe stolen data included names, dates of birth, addresses, email addresses and employment dates, and in most cases PPS or Social Security numbers. (irishmirror.ie)
- whatAll current employees and a significant number of former employees were affected. (irishmirror.ie)
- causeHackers found a way to compromise the MOVEit Transfer software used by Progress Software. (irishmirror.ie)
- investigationThe third-party provider and Aer Lingus notified the Data Protection Commissioner and the National Cyber Security Centre. (irishmirror.ie)
- otherThe attack is reportedly orchestrated by the Russian cyber-crime gang Clop. (irishmirror.ie)
- otherAer Lingus said no financial or bank details of its current or former employees were compromised. (irishmirror.ie)
- otherAn ESET Ireland analyst said the stolen information could theoretically be used for identity theft. (irishmirror.ie)
The reporting
newest first- 6 Jun2023Cyber attack on Aer Lingus systems could have led to identity thefts
Reports that the Aer Lingus staff data breach was part of a wider attack by the Clop gang on Zellis clients, that British Airways, the BBC and Boots staff were also affected, and that the Data Protection Commissioner and National Cyber Security Centre were notified.