Service provider for human resources, SD Worx, has suffered a cyber attack, causing IT systems in the United Kingdom and Ireland to be shut down. Customers in these countries are still unable to register, though customers in other countries have not been affected. Access to web-delivered services in the United Kingdom and Ireland remains unavailable. SD Worx sent a security advisory informing customers of the malicious activity discovered in its hosted data centre, and that it had taken immediate action to isolate systems and servers in order to contain the attack. SD Worx stresses that it is implementing strict measures to protect customer privacy and data, and is working on a solution as a matter of priority.
SD Worx’s business as a service provider for human resources and payroll means it stores vast amounts of private data that requires maximum protection, such as tax numbers, government IDs, full names and addresses of employees, dates of birth, some phone numbers, bank accounts, and employee reviews. While it is not yet known what type of attack took place, concerns remain about the potential for sensitive data leakage. SD Worx has confirmed that there is no evidence of data compromise at present and that the precautionary isolation is designed to mitigate further impact and fully assess the threat.
The company, which has its roots in Belgium, has more than 7,000 employees globally and processes payroll for more than 5.2 million employees for over 82,000 customers around the world. Recently, BIG health insurance also suffered a cyber attack and had to take its IT systems offline. It has not confirmed that it was a ransomware attack, and there is no evidence that data was leaked without authorisation.
