British telecom giant BT said it experienced a cyber security incident that affected its conferencing platform, forcing the company to take several systems offline.
Recently, the infamous Black Basta Ransomware group claimed that it infiltrated the internal network of BT Group and stole 500GB of data. The allegedly stolen data includes financial and organisational data, users’ data and personal documents, non=disclosure agreements, confidential information, and more.
According to BleepingComputer, the cybercriminal group also shared screenshots of documents requested by BT when hiring candidates to prove the authenticity of its claims.
The ransomware group has given a deadline till next week for the company to meet its ransom demands and has threatened to leak the stolen data if the company fails to comply.
Acknowledging the Black Basta group’s claims, a BT Group spokesperson said in a statement shared with the media, “We identified an attempt to compromise our BT Conferencing platform. This incident was restricted to specific elements of the platform, which were rapidly taken offline and isolated.
“The impacted servers do not support live BT Conferencing services, which remain fully operational, and no other BT Group or customer services have been affected.”
The spokesperson added that the incident was only an attempt to compromise the company’s conferencing platform and BT has launched an investigation into the attack. “We’re working with the relevant regulatory and law enforcement bodies as part of our response.”
The company is yet to share details on the scope of the incident, however, if the claims of the ransomware group are true, then this security incident was more than just an “attempt”.
