Zellis

zellis.com · technology

Filed here are the firms whose record of you did not begin with a sign-up. What holds the file together is the device rather than an account, so there may be nothing to log into and no delete button. The right to ask does not depend on having an account.

Reported incidents

Payroll data of BBC, BA and Boots staff taken through MOVEit

2023-06-05

Affected MOVEit Transfer file transfer software

Zellis, a UK payroll services provider, said data from eight of its client firms had been stolen after criminals broke into the MOVEit Transfer file transfer tool made by Progress Software. The BBC reported on 5 June 2023 that the BBC, British Airways, Boots and Aer Lingus had warned staff. The BBC told employees that staff ID numbers, dates of birth, home addresses and national insurance numbers were taken, and British Airways warned some staff that bank details may have been taken. Microsoft attributed the MOVEit attacks to a group linked to the Cl0p ransomware operation.

Reported by BBC News

People affected typically ask Zellis to confirm whether their information was included, and which categories.

The verified route

dpo@zellis.com
Privacy Recommended

DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.