07 April 2022

UK ferry operator Wightlink said it has been hit by a “highly sophisticated” cyberattack that may have compromised personal data belonging to “a small number of customers and staff”. The attack, which happened in February, affected certain back-office IT systems but not its ferry services, booking system, or website, the company added. Law enforcement and the UK’s Information Commissioner’s Office (ICO) have been notified along with potential breach victims, the company added. Wightlink operates three routes running between Hampshire in southeast England and the Isle of Wight, an island off the south coast. As soon as the incident was discovered, Wightlink said it engaged third-party cybersecurity experts to investigate and assess the situation.