Ransomware Attack on Travelex: Facts, Impact, and Prevention

Cyber Security

Table of Contents
INTRODUCTION...........................................................................................................................1
MAIN BODY...................................................................................................................................1
Task 1..........................................................................................................................................1
Facts of the ransomware attack..............................................................................................1
Affect on customers................................................................................................................1
How was the ransomware deployed on the Travelex system?...............................................2
Errors made by company that lead to the ransomware attack................................................2
Task 2..........................................................................................................................................2
Under GDPR what does a company have to do when it learns it has been the victim of a
cyber-attack resulting in a data breach?.................................................................................2
Fine imposed by ICO on the company...................................................................................3
Task 3..........................................................................................................................................3
How you would have prevented this data breach from taking place?....................................3
What measures should you take in order for it not to happen again?.....................................4
CONCLUSION................................................................................................................................4
References:.......................................................................................................................................5

INTRODUCTION
Ransomware attack is defined as the attack on computer systems where it acts like a
viruses and disrupts the working of the computer. It damages the software and operating system
of the computer. It enters into the computer via links, mails or downloads (Apruzzese, Colajanni,
Ferretti and Marchetti, 2018). Victim organization is Travelex, it is one of the foreign exchange
company based in UK in 1976. The following report covers the facts about attack, schedule of
attack, reason behind targeting Travelex, affect on customers, deployment of attack, errors made
by company, measures taken by company, fine imposed, prevention techniques, measures to
avoid and the conclusion.
MAIN BODY
Task 1
Facts of the ransomware attack
Ransomware attack made the victim to Travelex for their attack. It happened on the new
year's evening that is in the end of the year of 2019 that is on 31st December, 2019. Hackers
establish their ransomware attack on the network of the Travelex. This has resulted in taking
down of the various websites of the company to across thirty countries that contains the virus and
protect data. Gang which was involved named Sodinokibi communicated to the BBC news and
they wants the company to pay $6m or £4.6m. Hackers has targeted the company because they
were holding the large amount data through the attackers can get the good amount of money out
of it and so as they demanded the same using the news channels (Carley, Cervone, Agarwal and
Liu, 2018).
Affect on customers
Customers were frustrated and upset and got feared out of the company suffered of such a
huge loss and thinking about that how they can now recover all the data and money which they
have already lost due to the cyber attack. They were tensed because they had put on lot of money
and private data to the company and they were in great fear of loosing that so they are
demanding the their money which they had already paid to the company and seeking the security
of their private data and information which is held by the company. They are still suffering the
1