The data breach experienced by the payroll company Zellis affected The BBC, Boots, and British Airways.
The BBC is collaborating closely with Zellis as they urgently examine the scope of the data breach at their third-party supplier after becoming aware of it.
An unauthenticated attacker might take advantage of the SQL injection vulnerability to access the database of MOVEit Transfer without authorization.
The cybersecurity problem at Zellis, which included one of their third-party providers called MOVEit, has been reported to British Airways as having affected them.
Source: https://securityaffairs.com/147119/data-breach/zellis-data-breach-bbc-ba.html
"id": "BBC74619923",
"linkid": "bbc",
"type": "Breach",
"date": "06/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"