London Drugs has confirmed that a criminal group targeting the company has released stolen employee data on the dark web. The data, previously held for ransom, was exfiltrated from the corporate head office.
In a statement London Drugs acknowledged the breach, stating, “London Drugs has been named by cybercriminals as a victim of exfiltration of files from its corporate head office, and [it is] aware that some of these exfiltrated files have now been released.”
The company expressed deep concern over the incident, noting that some of the released data may contain personal information of its employees. London Drugs is taking immediate action to mitigate the impact of this breach. “We acknowledge that some of these files may contain some employee information – this is deeply distressing and London Drugs is taking all available steps to mitigate any impacts from these criminal acts, including notifying all current employees whose personal information could be potentially impacted and providing them with complimentary credit monitoring services and identity theft protection,” the statement added.
The cyberattack and subsequent data leak underscore the growing threat of cybercrime and the need for robust cybersecurity measures. London Drugs has assured its employees and the public that it is working closely with cybersecurity experts to address the breach and prevent future incidents.
This breach is part of a broader trend of increasing cyberattacks targeting companies and organizations worldwide. The release of employee data on the dark web can lead to significant personal and financial risks, making immediate and comprehensive responses crucial.
For those affected, London Drugs is providing complimentary credit monitoring services and identity theft protection to help safeguard against potential misuse of their personal information.