Data Breach

UK Arup staff details stolen in cyber attack

Staff at Arup have had personal details, which is said to include bank details, names and addresses, stolen after the engineering firm’s external payroll supplier was hit by a cyber attack. Symatrix, which is contracted to handle the payroll for Arup’s 6,000 UK staff, was hit by a cyber attack in mid-January. It has not been disclosed how many staff may have been affected by the data breach.

Arup payroll provider hacked

The engineering firm was informed of the leak on 11 March, with the Information Commissioner’s Office also informed of the data breach. It is understood that the data stolen includes

  • first name
  • surname
  • bank account number
  • bank sort code
  • national insurance number
  • date of birth
  • gender
  • addresses of employees

Symantix has been contacted to clarify what personal data has been accessed and how many staff were affected.

It appears that Arup staff were informed that the payroll provider was the victim of a ransomware attack, meaning the files which were stolen, copied and encrypted, before being held to ransom in order to access the data. Arup have stated

“We have been informed about a data incident impacting our payroll provider Symatrix and we are working closely with them to establish the extent to which our staff have been affected. Our commitment to data security remains a priority and we are working at pace to resolve the issue.”

Danger of third party breach in GDPR

Arup employees are now being asked to monitor their banks and email to ensure that their personal information is not being used by cyber criminals. The payroll provider to the construction giant Arup, Symatrix stated

“We can confirm that the Symatrix internal network was the target of a cyber attack on 12 January. Our IT experts took immediate steps to contain the incident, including shutting off our internal servers, and engaged a dedicated team of IT forensic experts to conduct a thorough investigation. We notified the Information Commissioner’s Office and the police via Action Fraud, and kept customers regularly updated on the investigation progress."

How can Evans Hughes help Arup employees affected by the data breach

We have seen time and time again how cyber criminals are becoming more sophisticated in the way they access personal, sensitive information and how they go about using this data. Our advice is to make contact with your payroll provider and see exactly what information has been taken. You can then plan to protect yourself and inform your bank and remain extra vigilant.

If you have been affected by a data breach and need advice then you can contact our data breach experts at Evans Hughes for free impartial advice.

Latest Articles

View All

Was my pension transfer the wrong thing to do?

Pension transfers are a big decision and transferring out of a final salary scheme is rarely good advice. However, many people were advised to do that due to negligent financial advice. Evans Hughes are financial mis-selling experts and specialise in helping clients claim compensation when they have been given negligent financial advice to transfer their pensions.

April 26, 2021

What are Business Energy Claims?

It has been estimated that around 50% of UK businesses use an energy broker to find them a competitive deal on their business energy. Unfortunately, an industry-wide problem is coming to light which shows that many companies have been mis-sold gas and electricity. Third parties are charging commissions that are not made explicitly clear from the outset, resulting in much higher energy charges.

April 26, 2021

Push Payment Fraud Compensation Claims

Push payment fraud is a very serious crime, and the victims can suffer financial loss and distress as well as loss of privacy. In many push payment scams, banks are reluctant to compensate. So, people can be left not knowing where to turn.

April 26, 2021