A Russia-based cybercrime gang has issued an ultimatum to victims of a hack that hit staff at International Consolidated Airlines Group SA (LSE:IAG)-owned British Airways, the BBC, and Boots.
The Clop gang are believed to have been behind the attack which affected more than 100,000 staff after issuing a notice on the dark web that victims should email them before 14 June 2023 or their stolen data will be published.
According to the BBC, employees are being urged not to pay up if the hackers demand a ransom.
The post, seen by the BBC, said “This is announcement to educate companies who use Progress MOVEit product that chance is that we download a lot of your data as part of exceptional exploit.”
Unconventionally, the hackers have asked victims to get in touch with them, rather than the criminals contacting the victims for ransom, possibly due to being unable to keep up with the sheer scale of the attack.
Last week, the criminals broke into MOVEit, a popular business software, to access personal data at potentially hundreds of other companies.
MOVEit is supplied by Progress Software (NASDAQ:PRGS) in the US to businesses around the world, with payroll services provider Zellis as one of its users.
Zellis confirmed eight organisations had data stolen, including Aer Lingus, the Nova Scotia Government, and The University of Rochester.