👀 Ones to watch: Undervalued stocks to buy before they report Q3 earningsSee Undervalued Stocks

Deloitte hacked, says 'very few' clients affected

Published 09/25/2017, 02:07 PM
© Reuters. Offices of Deloitte are seen in London
EFX
-

By Paul Sandle and Jim Finkle

LONDON/TORONTO (Reuters) - Global accounting firm Deloitte [DLTE.UL] said on Monday it was the victim of a cyber attack that affected the data of a small number of clients, providing few details on the breach.

Deloitte said in a statement that attackers accessed data from the company's email platform, confirming some details in a report by the Guardian newspaper, which broke news of the hack on Monday.

The attack appeared to target the firm's U.S. operations, was discovered in March and could have begun as early as October 2016, according to the Guardian. Deloitte's statement did not confirm those details.

The breach at Deloitte, which says its customers include 80 percent of the Fortune 500, is the latest in a series of breaches involving organizations that handle sensitive financial data that have rattled lawmakers, regulators and consumers.

The U.S. Securities and Exchange Commission, Wall Street's top regulator, and Equifax Inc (N:EFX), one of the largest credit-monitoring bureaus, this month reported that confidential filings and sensitive personal data were compromised by hackers.

"These are targeted attacks on financial opportunity," said Shane Shook, an independent consultant who helps financial firms investigate cyber attacks. "This trend is going to continue to grow."

The firm said it contacted government authorities immediately after it became aware of the incident, and notified each of the "very few clients" that had been affected.

Deloitte is a "Big Four" firm that provides accounting, auditing and consulting services, including advice on mergers and acquisitions. It also runs a cyber security business that helps customers defend their networks and investigate breaches.

The Guardian said Deloitte had contacted six clients. The company did not name the clients, confirm the number of clients it had contacted or say what type of data was stolen.

"No disruption has occurred to client businesses, to Deloitte's ability to continue to serve clients, or to consumers," the statement said.

Deloitte said it had implemented a "comprehensive security protocol," after the incident was discovered, using internal and external experts to help respond.

Mark Rasch, a former federal cyber crimes prosecutor, said it is too soon to say how serious the attack was because so little is known about what happened.

Still, he said the attack was "a big deal" because Deloitte holds sensitive information about its customers across business units that provide accounting services, review data on potential acquisitions and perform cyber security services.

© Reuters. Offices of Deloitte are seen in London

A U.S. Federal Bureau of Investigation spokeswoman declined to comment, citing agency policy to neither confirm nor deny investigations.

Latest comments

Risk Disclosure: Trading in financial instruments and/or cryptocurrencies involves high risks including the risk of losing some, or all, of your investment amount, and may not be suitable for all investors. Prices of cryptocurrencies are extremely volatile and may be affected by external factors such as financial, regulatory or political events. Trading on margin increases the financial risks.
Before deciding to trade in financial instrument or cryptocurrencies you should be fully informed of the risks and costs associated with trading the financial markets, carefully consider your investment objectives, level of experience, and risk appetite, and seek professional advice where needed.
Fusion Media would like to remind you that the data contained in this website is not necessarily real-time nor accurate. The data and prices on the website are not necessarily provided by any market or exchange, but may be provided by market makers, and so prices may not be accurate and may differ from the actual price at any given market, meaning prices are indicative and not appropriate for trading purposes. Fusion Media and any provider of the data contained in this website will not accept liability for any loss or damage as a result of your trading, or your reliance on the information contained within this website.
It is prohibited to use, store, reproduce, display, modify, transmit or distribute the data contained in this website without the explicit prior written permission of Fusion Media and/or the data provider. All intellectual property rights are reserved by the providers and/or the exchange providing the data contained in this website.
Fusion Media may be compensated by the advertisers that appear on the website, based on your interaction with the advertisements or advertisers.
© 2007-2024 - Fusion Media Limited. All Rights Reserved.