The media giant assured that sensitive data such as phone numbers, email addresses, usernames, passwords, bank accounts, or other financial information were not compromised
The BBC has disclosed a “data security incident” affecting files containing information on members of its Pension Scheme. According to the BBC, these files were copied by an unidentified entity from a cloud storage service and contained personal information such as names, National Insurance numbers, home addresses, and dates of birth.
The media giant assured that sensitive data such as phone numbers, email addresses, usernames, passwords, bank accounts, or other financial information were not compromised. Additionally, the Pension Scheme website and the member portal remain unaffected by the breach.
“It is also important to note that analysis undertaken by our specialist teams currently shows no evidence that the affected files have been misused,” the BBC stated. They emphasized that the compromised files were copies, so there is no impact on the operations of the Pension Scheme, which continues as normal.
The breach affects over 25,000 current and former employees, as per reports . While the BBC has not indicated that this incident was a ransomware attack, they have not provided further details on the breach.
This is not the first data breach the BBC has experienced. Last year, the company was among the many victims of the MOVEit hack, where cybercriminals exploited a zero-day vulnerability to steal data from hundreds of organizations.