The BBC has been told that Royal Mail’s overseas deliveries were caused by a ransomware attack involving Russia.
The attack has affected the computer systems Royal Mail uses to send deliveries abroad.
Royal Mail has been warning customers of disruptions due to a “cyber incident” since Wednesday.
The latest advice is that people should not try to send international letters and packages until the problem is resolved.
Ransomware is malicious computer software that encrypts data and locks down systems.
The ransomware used in the attack is “Lockbit,” according to a source close to the investigation.
Computer security firms say the software was developed and used by criminal gangs with ties to Russia.
The BBC has seen a ransom note sent to Royal Mail by the criminals, which reads: “Your data will be stolen and encrypted”.
The ransom demand is expected to be in the millions, although sources close to the investigation say there are “workarounds” to get the system working again.
Ransomware attacks are a constant threat to businesses around the world as attacks occur almost daily.
However, this situation is of great importance as Royal Mail is considered “critical national infrastructure” – meaning it is vital to the UK economy.
- Guardian newspaper hit by suspected ransomware attack
- Royal Mail is telling people not to send mail abroad due to a ‘cyber incident’
The attack affects not only a company and its customers, but the communication and business of citizens at home and abroad.
Ransomware crews usually increase pressure on businesses to transfer funds in a cryptocurrency like bitcoin to an anonymous digital wallet.
They have a deadline and are likely threatening Royal Mail with the prospect of releasing potentially sensitive data.
LockBit is believed to have strong Russian roots, but the hacker who carried out the attack could be anywhere.
Last November, a Canadian-Russian man was arrested for allegedly conducting LockBit hacks from Canada.
A Royal Mail spokesman declined to comment on whether the attack was ransomware, but repeatedly warned customers there was no end to the disruption in sight.
The company is still unable to send letters and parcels abroad and says it is working “hard” to fix the problem.
There are also slight delays in UK postal delivery, but domestic deliveries are unaffected.
Some customers who had already sent shipments abroad before the “incident” could experience delays, it said.
A spokesman for the National Crime Agency said he was “aware of an incident affecting Royal Mail” and was working with the National Cyber Security Center – which is part of the UK’s cyber intelligence agency GCHQ – to investigate its understand impact.
The affected back office system is used by Royal Mail to prepare mail for dispatch abroad and to track and trace overseas shipments.
It will be used at six locations, including Royal Mail’s massive distribution center at Heathrow in Slough, as well as its Bristol location.
Royal Mail has faced a number of hurdles in recent months, including delivery delays, as postal workers went on strike over pay and working conditions.
Add Comment