Update on Flagship Group cyberattack

On Sunday 1st November 2020, Flagship Group were subject to a cyberattack and have since been advised by their
cybersecurity specialists, that it was caused by ransomware, known as Sodinokibi. As part of their
controlled response, Flagship took most of their IT systems offline and in the short term the attack limited
them to emergency operations.

However, Flagship Group are now in a stage of carefully controlled recovery and their teams have safely and
securely rebuilt their essential systems. With each system, they are making sure it is safe to bring back
online and therefore some systems are yet to be restored. They hope to see things back to normal
very soon.

Since discovering the cyberattack, Flagship have carried out an investigation with internal and external
specialists, and to date, there is no evidence of customer or staff data being stolen. The investigation
is still ongoing, and they will release a further statement following its conclusion.

They take the privacy and security of their customer and staff data very seriously, and are reviewing
their cybersecurity practices. And for additional peace of mind, they have offered fraud and web
monitoring services to their customers and staff.

Flagship Group continue to work closely with the Information Commissioner’s Office (ICO) and respective
agencies.

They want to thank their customers and staff for their continued patience and apologise for any inconvenience this attack has caused.

For more details, please contact them on 0845 258 6399, or via email: commsteam@flagship-group.co.uk