Deloitte suffers major cyber attack

Deloitte discovered breach in March, but its systems could have been vulnerable since October 2016 - report

Another week, another report of a major cyberattack hitting a global firm.

Following on from an attack which exposed millions of Equifax customer details earlier this month, The Guardian is reporting Deloitte has been similarly targeted by an especially sophisticated hack.

It is believed confidential emails and plans of Deloitte's blue-chip clients have been exposed in an attack that went unnoticed for months. Reports suggest Deloitte learned of the breach in March, but its systems could have been vulnerable since October 2016.

Advertisement - Article continues below

A hacker, or group of hackers, was able to break into Deloitte's systems by compromising an email server via an "administrator's account". This would have given the attackers full access to the company, and such accounts typically have two-factor authentication enabled.

Deloitte, one of the world's largest private accountancy firms, manages clients such as banks, publishers as well as government agencies, and it is thought companies spanning the full range of Deloitte's clients could be at risk.

A spokesperson for Deloitte said in a statement emailed to IT Pro: "The attacker accessed data from an email platform. The review of that platform is complete."

From the review, the company said it has determined that only very few clients were impacted, and that no disruption has occurred to clients' businesses, to Deloitte's ability to continue to serve clients, or to consumers.

"Deloitte remains deeply committed to ensuring that its cyber security defences are best in class, to investing heavily in protecting confidential information and to continually reviewing and enhancing cyber security," the spokesperson added.

Advertisement - Article continues below

As part of its response to the incident, Deloitte is contacting each of the affected clients, and the spokesperson said it contacted the relevant governmental authorities as soon as it knew of the incident.

It is now implementing initiating "an intensive and thorough review which included mobilising a team of cyber security and confidentiality experts inside and outside of Deloitte".

Picture: Bigstock

Featured Resources

Security analytics for your multi-cloud deployments

IBM Security QRadar SIEM solution brief

Download now

Five reasons to move to the cloud

Join the enterprises moving their workloads to the cloud

Download now

Architecting hybrid IT and edge for digital advantage

Why business leaders should consider a hybrid IT strategy

Download now

Six reasons to accelerate remote asset monitoring with AI

How to optimise resources, increase productivity, and grow profit margins with AI

Download now
Advertisement

Recommended

Lazarus APT hacking group is targeting the defense industry
Security

Lazarus APT hacking group is targeting the defense industry

26 Feb 2021
Microsoft open sources CodeQL queries used in Solorigate inquiry
Security

Microsoft open sources CodeQL queries used in Solorigate inquiry

26 Feb 2021
CISA warns of ongoing Accellion File Transfer Appliance attacks
hacking

CISA warns of ongoing Accellion File Transfer Appliance attacks

25 Feb 2021
What is a Trojan?
Security

What is a Trojan?

25 Feb 2021

Most Popular

How to build a CMS with React and Google Sheets
content management system (CMS)

How to build a CMS with React and Google Sheets

24 Feb 2021
How to connect one, two or more monitors to your laptop
Laptops

How to connect one, two or more monitors to your laptop

25 Feb 2021
Oxford University COVID lab falls victim to hackers
hacking

Oxford University COVID lab falls victim to hackers

26 Feb 2021