24/11/2020
Update on Flagship Group cyberattack
On Sunday 1 November 2020, we were subject to a cyberattack and we have been advised by our cybersecurity specialists, that it was caused by ransomware, known as Sodinokibi. As part of our controlled response, we took most of our IT systems offline and in the short term the attack limited us to emergency operations.
However, we are now in a stage of carefully controlled recovery and our teams have safely and securely rebuilt our essential systems. With each system, we are making sure it is safe to bring back online and therefore some systems are yet to be restored. We hope to see things back to normal very soon.
Since discovering the cyberattack, we have carried out an investigation with internal and external specialists, and to date, there is no evidence of customer or staff data being stolen. The investigation is still ongoing, and we will release a further statement following its conclusion.
We take the privacy and security of our customer and staff data very seriously, and we are reviewing our cybersecurity practices. And for additional peace of mind, we have offered fraud and web monitoring services to our customers and staff.
We continue to work closely with the Information Commissioner’s Office (ICO) and respective agencies.
Thank you for your continued patience and we’re sorry for any inconvenience this attack has caused.