Stockport-based Digital ID is at the centre of a ransomware attack and data breach that potentially involves the personal details of thousands of Metropolitan Police staff.
As well as supplying printers and associated equipment for self-printing, the firm offers printing services, including custom printed cards, photo ID cards, and branded lanyards, including for the Met’s warrant cards and staff passes.
The Sun reports that the attack came after new warrant cards and passes were produced in a scheme, codenamed Operation Fortress, to improve security. The report adds that that Digital ID’s managing director was contacted by hackers – apparently located overseas and believed to be extortionists rather than terrorists – who demanded a ransom from the company.
Many Met staff only heard of the hack via the newspaper’s story as the news was posted on the organisation’s internal intranet rather than emailed directly to staff over last week’s bank holiday weekend.
Met commissioner Mark Rowley apologised to staff in a personal message which read: “Whilst it does not include the most personal data such as addresses or financial data, this breach I know causes wider concern.”
Digital ID said in a statement: “We recently identified an IT security incident that affected the company’s systems. We have engaged the assistance of specialist external cyber and forensic consultants who are in the process of conducting an investigation to assess the potential impact.
“The incident has been reported to the authorities and therefore it would not be appropriate for us to offer any further comment at this time or confirm the involvement of any third party.”
The firm said it was processing orders as normal in the meantime: “There is some backlog which we are working through as speedily as possible, and expect to return to normal operations later this week,” it said.
The BBC is another high-profile customer of the Stockport firm, although it is believed the corporation buys blank cards from Digital ID and prints them in-house.
A review of all data held on the Met by the firm is reportedly now being carried out.
