APCS Warns Customers After Service Provider Network Breach

Access Personal Checking Services, a background screening provider, recently disclosed a data security incident following a breach of one of its service providers’ internal networks by threat actors.

 

APCS is the UK’s fastest provider of Disclosure and Barring Service (DBS) checks, formerly Criminal Record Bureau checks. These are used for background screening in roles involving children, vulnerable people, healthcare, and finance.

 

Recently, The Register reported that APCS is notifying customers of a data security incident after its Hull-based service provider, Intradev, was initially targeted. In a statement to the media, Intradev’s managing director, Steve Cheetham, said the cyber attack was detected on August 4, but the source of the intrusion is still under investigation.

 

“This incident involved unauthorised malicious activity with our systems and is being treated as a significant IT incident.

 

“Initial containment measures were implemented immediately. We are currently conducting a detailed investigation into the incident, including a review of the affected files and systems. At this stage, we are working to understand the nature and scope of the data involved,” he said.

 

Cheetham added that confidential data was accessed during the incident and the company is in the process of determining the nature and scope of the incident.

 

The exact data affected by the attack is still under investigation. However, APCS has informed customers that the breach likely involved basic personal details, as well as passport, driving license, and national insurance information.

 

“We have reported the incident to the relevant authorities, including the Information Commissioner’s Office (ICO) and Action Fraud, and continue to liaise with them as appropriate. We remain committed to fulfilling our legal and regulatory obligations and handling this matter with diligence and care,” Cheetham added.