Interserve hit with £4.4m fine after cyber attack

Grant Prior 2 years ago
Share

Interserve Group Ltd has been fined £4.4m by the Information Commissioner’s Office (ICO) for failing to keep personal information of its staff secure.

The fine follows a breach of data protection law in May 2020 when the company failed to put appropriate security measures in place to prevent the cyber attack, which enabled hackers to access the personal data of up to 113,000 employees through a phishing email.

The compromised data included personal information such as contact details, national insurance numbers, and bank account details.

The ICO said: “An Interserve employee forwarded a phishing email, which was not quarantined or blocked by the company’s system, to another employee who opened it and downloaded its content.

“This resulted in the installation of malware onto the employee’s workstation.

“The company’s anti-virus software quarantined the malware and sent an alert, but Interserve failed to thoroughly investigate the suspicious activity. If they had done so, Interserve would have found that the attacker still had access to the company’s systems.

“The attacker subsequently compromised 283 systems and 16 accounts, as well as uninstalling the company’s anti-virus solution. Personal data of up to 113,000 current and former employees was encrypted and rendered unavailable.

“The ICO investigation found that Interserve failed to follow-up on the original alert of a suspicious activity, used outdated software systems and protocols, and had a lack of adequate staff training and insufficient risk assessments, which ultimately left them vulnerable to a cyber attack.”

The ICO issued Interserve with a ‘notice of intent’ – a legal document that precedes a potential fine. The provisional fine amount was set at £4.4m. Having carefully considered representations from Interserve, no reductions were made to the final fine amount.

Interserve plc went into a pre-pack administration in March 2019 and was rebranded as Interserve Group. A break-up followed with Interserve’s facilities management business sold to Mitie in December 2020 and RMD Kwikform sold in October 2021 to Altrad.

In March 2021 Interserve rebranded its construction and engineering business as Tilbury Douglas.

An Interserve statement said: ‘”Interserve has worked extensively with the Information Commissioner’s Office (ICO) and the National Cyber Security Centre since first reporting the cyber incident in May 2020.

“Interserve strongly disputes that its staff and the company’s response were in any way complacent.

“Interserve took extensive steps to resolve the incident, engaging leading cyber response companies, and made significant investments across its operating companies to mitigate the potential impacts of the cyber incident on its past and present staff.

“It also sought to reduce the risk of future incidents and successfully facilitate the safe and effective ongoing operations of Tilbury Douglas and the facilities management business acquired by Mitie Group PLC.

“Interserve will continue to prioritise the interests of its past and present staff, counterparties and other stakeholders while engaging with the ICO to resolve their investigations”

Latest news

Morgan Sindall to build former Willmott Dixon leisure job

New contractor appointed on
15 hours ago

Graham consortium wins £400m Manchester job

Equitix consortium to now work up DBFO plans for University of Manchester’s Fallowfield Campus
11 hours ago

Keltbray looking to sell infrastructure business

£378m turnover rail, energy and highways business up for sale
22 hours ago

Innovative viaduct building method used for first time in UK

HS2 contractors will build nine viaducts in Delta Junction using special cantilevered process
22 hours ago

Unite buys London site to fast-track 444-bed student scheme

£800m to be spent on London development pipeline in next five years
22 hours ago

CITB awards £2.5m of contracts to management consultant

Three outsourced deals in the last year for "project leadership and management consultancy"
22 hours ago

Village centre approved for 6,000-home new town plan

Hampshire's Welborne Garden Village plan has been in the pipeline for two decades.
21 hours ago

£3m fine after cherry picker demolition death

Court rules after tragedy during decommissioning of gas rig
22 hours ago

BAM plans wave of job cuts at UK Construction arm

Co-op Live arena plunges Bam Construction to £19.5m first-half loss
2 days ago

Robot tunnel builder goes into administration

Hypertunnel was hoping to revolutionise how underground structures are built
2 days ago

Wates to build £86m Guildford Council housing scheme

40% of the 248 homes will become council homes under partnership deal
2 days ago

“Scrap CITB” say three quarters of construction firms

Payroll giant Hudson Contract calls for CITB to be absorbed into new Skills England training body
2 days ago

£100m Prestwich Village revival approved

Vinci and Willmott Dixon in chase for Muse-led regeneration scheme
2 days ago

Carbon negative asphalt aggregate trialled on M11

Skanska and Tarmac test CO2 absorbing aggregate material on stretch of Essex motorway
2 days ago

Father and son sentenced over covid construction loan fraud

Bristol builders given suspended jail sentences over bogus Bounce Back Loans
2 days ago

Beck Interiors files administration notice

Supply chain has suffered delayed payments from £139m-turnover luxury fit out specialist
3 days ago

Green light for York Central civil service office hub

£60m office project accelerates York Central goods yard redevelopment
3 days ago

Blenheim House Construction enters administration

Administrators looking at options on present projects
3 days ago

Profits rise at Esh Group with more to come

Contractor confident about year ahead as market conditions move in right direction
3 days ago

Piling specialist Van Elle sees housing orders rise 30%

Mark Cutler says firm on course to deliver 10% annual sales growth
3 days ago

HS2 to spend £100m shutting sites where work never started

Remediation of sites no longer needed for cancelled Phase 2 will take three years
4 days ago

Willmott Dixon wins £61m deal for new Army dog unit

Contractor to revamp Kendrew Barracks in Rutland
3 days ago

Stockport advances 4,000-home Town Centre East plan

Council seeks consultants to steer plan for 280-acre area in the city
3 days ago

ISG sale imminent as buyers set-up UK holding company

South African nutrition entrepreneur and Australian partner primed to take over
4 days ago

CR Construction wins £210m Manchester towers

Construction to start next year on four blocks ranging from nine to 34-storeys
4 days ago

Southern Housing to rationalise supply chain following merger

Firms put on alert for £1.7bn construction framework renewal
4 days ago

Decision delayed on 52-storey Isle of Dogs tower

Hong Kong developer plans 460 flats block next to Millwall Inner Dock
4 days ago

Go-ahead for £850m North London estate rebuild

Flagship Edmonton housing estate redevelopment will deliver 2,000 new homes
4 days ago

Mace lands £184m Oxford Science Park contract

Contractor to build trio of laboratory and office buildings
5 days ago

Worker paralysed in 30ft fall during electricity pylon demolition

Specialist firm fined £240,000 after court hears linesman attached lanyard to a loosened steel section
4 days ago

Contractor services