The north west rail network Merseyrail has confirmed a cyberattack after a ransomware gang used their email system to email employees and journalists about the attack. Employee and potentially customer information has been compromised during this data breach.
It appears that Merseyrail have been the latest company to fall victim to a cyberattack. In an email sent from the managing directors email account to several newspapers and employees it details how an email outage the previous weekend was actually part of a much more serious data incident. What is unusual about this is that the email was sent by Andy Heath, Merseyrails current managing director's email account in order to show that they have been hacked.
What data has been compromised?
At this early stage it is thought that employee data has been compromised at Merseyrail though customer data has not been ruled out. This is due to the contents of the email sent from the hacked email account. This has allegedly contained a link to show employees personal information that was taken in the data breach. The email in question was sent on 18th April 2021 to various employees of Merseyrail and also a large number of national newspapers.
Merseyrail is a UK rail network that provides train service through sixty-eight stations in the Liverpool City Region in England. They currently employ over 1200 staff in bases from Southport, Liverpool and the Wirral.
Merseyrail state that they have informed the relevant authorities and including the Information Commissioners Office (ICO)
How has this happened?
It is thought at this stage that the criminals have targeted office 365 in order to gain access to the Managing Directors email. This appears to be an attempt to put Merseyrail under pressure to confirm the data breach the previous week.
A spokesperson for the rail operator told said in a statement: “Merseyrail was recently subject to a cyber-attack. A full investigation has been launched and relevant authorities notified. This does not affect the operation of our services, which will continue to run as advertised."
If you are the victim of a data breach then feel free to contact us to have a free consultation into how our data breach experts can help. The expert advisors at Evans Hughes are on hand to offer practical security advice in the aftermath of a data breach and also to help you gain compensation for any loss or damage or emotional distress you may have suffered as a result.
Pension transfers are a big decision and transferring out of a final salary scheme is rarely good advice. However, many people were advised to do that due to negligent financial advice. Evans Hughes are financial mis-selling experts and specialise in helping clients claim compensation when they have been given negligent financial advice to transfer their pensions.
It has been estimated that around 50% of UK businesses use an energy broker to find them a competitive deal on their business energy. Unfortunately, an industry-wide problem is coming to light which shows that many companies have been mis-sold gas and electricity. Third parties are charging commissions that are not made explicitly clear from the outset, resulting in much higher energy charges.
Push payment fraud is a very serious crime, and the victims can suffer financial loss and distress as well as loss of privacy. In many push payment scams, banks are reluctant to compensate. So, people can be left not knowing where to turn.