Southern Water confirmed this morning that criminals broke into its IT systems, making off with a “limited amount of data.”
The Black Basta ransomware group claimed the attack while publishing a snippet of the data it allegedly stole, which included:
- Scans of identity documents such as passports and driving licenses
- Documents that appear to be HR-related, displaying the personal data of what could be customers, including home address, office address, dates of birth, nationalities, and email addresses
- Corporate car-leasing documents exposing personal data