One of Belgium’s biggest HR and payroll service providers, SD Worx, experienced a cyberattack that shut down all IT systems for its Irish and British services.
SD Worx is a European HR and payroll management company with over five million employees for approximately 82,000 companies. The company has started to disseminate notification letters to its customers that contain warning about its UK and Ireland divisions suffering a cyberattack.
Based on reports, SD Worx’s security team discovered the cybercriminal activities earlier this week. Fortunately, the company has executed an immediate response action and isolated the incident to prevent the spread of the infection. However, the attack has still compromised the company’s systems.
The company also explained that it applied rigorous organisational and technical security protocols to secure the privacy and data of its customers.
Moreover, this Belgian service provider claimed they are addressing this issue with the highest priority to recover lost access to their systems. After further investigation, the affected firm assured everyone they would give more details about the incident.
The cyberattack against SD Worx has disrupted their operations in the United Kingdom.
According to SD Worx, their login portals for other European countries remained accessible for their users. Unfortunately, their service in the United Kingdom is unstable as their customer portal within the government is not accessible.
The nature of the attack against the company is not yet confirmed, but concerned customers claimed that the attack could have stolen sensitive data.
The attack against this company could have catastrophic damages as SD Worx manages troves of sensitive data across different European employees. The firm’s general conditions agreement indicates that the data could include critical information, such as government ID numbers, tax information, names, birth dates, phone numbers, bank account numbers, and employee evaluations.
Similar incidents against payroll and HR management service providers have resulted in lawsuits for incompetence in protecting customers’ data.
Cybersecurity experts warn UK-based customers to be wary of unwanted communication or phishing pages as the attack lost data such as phone numbers and email addresses.