A cyber attack on Southern Water’s computer system has resulted in the personal details of up to 10% of its customers being stolen. Households across the Isle of Wight and the company’s wider service area have received emails about the data breach, which confirms personal details and financial information – such as names, dates of birth, bank account details and national insurance numbers – may now be in the hands of criminals. The water supplier has assessed that between 5-10% of its customers have been affected, which means the details of around 450,000 people could now be in the wind. But reassurances have been given that the company is working with cybersecurity experts on the matter. The Black Basta ransomware group has claimed responsibility for the attack. In a statement, Southern Water has said:
“Based on our forensic investigations so far, which are ongoing, we are planning to notify in the order of 5 to 10% of our customer base to let them know that their personal data has been impacted. We are also notifying all of our current employees and some former employees. “We have engaged leading independent cybersecurity experts to monitor the ‘dark web’. We take data protection and information security very seriously and, in accordance with our regulatory obligations, we are making contact with anyone whose personal data may be at risk.”
The Information Commissioner’s Office has been informed.
