February 7, 2025
The UK’s leading book printer, CPI was hit by a ransomware attack. Clients of CPI, including Welsh independent Firefly Press, have been majorly affected.
Production at 8 factories shut down for over 12 days. Customers reported delays in printing their books as long as 18 days after the initial attack.
May 15, 2024
Philadelphia, Pennsylvania-based operation of Racal Acoustics Ltd. suffered a cyberattack against its employees that started in May 2024. “On January 9, 2025 we learned which employees had their information accessed. The company immediately provided notice of the incident and afforded these employees identity protection.
January 13, 2025
Nominet, the official .UK domain registry and one of the largest country code registries, has confirmed that its network was breached two weeks ago using an Ivanti VPN zero-day vulnerability. Since it detected suspicious activity on its network, the company has reported the attack to relevant authorities, including the NCSC, and restricted access to its systems via VPN connections. “The entry point was through third-party VPN software supplied by Ivanti that enables our people to access systems remotely,” Nominet says in a customer notice shared with BleepingComputer. “”e currently have no evidence of data breach or leakage.
February 6, 2025
British-based engineering firm IMI plc has disclosed a security breach after unknown attackers hacked into the company’s systems. An IMI spokesperson declined to comment when asked by BleepingComputer provide more details about the attack, such as the date it was detected, whether it impacted its operations, and whether the threat actors stole company or customer information from compromised systems.
January 28, 2025
U.K. engineering firm Smiths Group — whose operations span 50 countries across a range of sectors — has detected “unauthorised access” in its systems, the company informed the London Stock Exchange on Tuesday. Smiths Group said it “rapidly isolated affected systems and activated business continuity plans” after it detected the activity.
November 18, 2024
The printing Henley Standard was delayed after its publisher was victim of a cyber attack. The attack brought down the company’s production, web and communications systems and also impacted its website.
Technical teams have been working through the night since Monday to restore the processes required to produce the paper. It is hoped that the Henley Standard can be printed and distributed later today (Thursday 21 November).
March 26, 2024
The Big Issue Group experienced a cyber incident. “On becoming aware of this, we took immediate steps to restrict access to our systems, working with external IT security experts, and the investigation into the incident is ongoing,” said the company’s chief executive Paul Cheal.
January 18, 2024
Liverpool City Region Combined Authority issued a statement on Friday afternoon saying its had been informed on Thursday by one of its third-party suppliers that it was the victim of a cyber-attack. In response the CA shut down both the Merseytravel and Mersey Ferries websites, although both appeared to be functioning normally again on Friday afternoon.
“This attack has potentially affected some of our online services provided via our Merseytravel and Mersey Ferries websites.”
December 4, 2024
Multinational telecommunications giant BT Group (formerly British Telecom) confirmed its BT Conferencing business division shut down some of its servers following a Black Basta ransomware breach. “The impacted servers do not support live BT Conferencing services, which remain fully operational, and no other BT Group or customer services have been affected.”
Black Basta ransomware gang claimed they stole 500GB of data, including financial and organizational data, “users data and personal docs,” NDA documents, confidential information, and more.
August 7, 2024
The Port of Tyne confirmed its site was down for some time on Tuesday following a distributed denial of service (DDOS) attack, which attempts to overload a website to make it hard to use or inaccessible.
A spokesman for the port said operational systems, which are separate, had not been affected and all data was “safe and secure”.
“Full website accessibility was restored quickly and the Port is working with all relevant parties to investigate the source of the attack,” they added.