Fleet tech provider Microlise says data security incident compromised corporate data

The Microlise Group, a Nottingham-based transportation technology solutions provider, said hackers stole corporate data and disrupted customers’ systems during a cyber security incident in October.

 

In a data security incident notification filed with the London Stock Exchange on Oct. 31, Microlise said that it suffered a cyber attack that affected “large portion of the Company’s services” that “resulted in disruption to services which are currently inactive.”

 

The company launched an investigation and has appointed external cyber security experts to determine the nature and scope of the incident. Microlise also notified relevant regulators and law enforcement agencies, including the Information Commissioner’s Office.

 

In a recent update shared with the London Stock Exchange, Microlise said its investigation revealed that the cyber security incident did not compromise any data stored in its customer systems even though the incident had impacted their functioning.

 

“The Company can now confirm that the vast majority of customer systems are back online, with some remaining customers conducting their own security verifications before enabling users. The Company would like to reiterate that no customer systems data was compromised.

 

“The Company is continuing to assess the impact of the incident. However, the Board still does not anticipate any material adverse impact to its trading forecasts and financial position for FY24,” Microlise said.

 

The company also informed the London Stock Exchange on November 6 that the cyber security incident impacted limited employee data but did not state the number of employees whose data was accessed.

 

The technology solutions provider has, however, confirmed that the threat actors who infiltrated its internal network accessed “corporate data from its HQ” and the company has notified international authorities regarding the data exfiltration.

 

Several companies that use Microlise’s service were impacted by the cyber attack, including Serco, a company that provides prisoner escort services for the Ministry of Justice.

 

According to reports, location tracking, panic alarms, navigation services and notifications related to estimated arrivals were unavailable for the fleet. Drivers were forced to use paper maps to navigate and check in with prison bases every 30 minutes.

 

In a statement shared with the media, a Serco spokesman said, “We are aware that one of our subcontractors has been impacted by a cyber incident.  We have put in place mitigation plans and we have continued to provide prisoner escorting services uninterrupted for the Ministry of Justice.”