Organizations don't think about keeping backups away from their network or even off-site
Interesting use of the word "backup".
The Communications Workers Union (CWU), which represents hundreds of thousands of employees in sectors across the UK economy including tech and telecoms, is currently working to mitigate a cyberattack. In what was originally being called a serious IT outage at the end of last week, the union confirmed to The Register today …
Asked about the claims made by the source, Webb had questioned where they got the information, saying they were "in dreamland" and that they "shouldn't be trusted."
We shall see (the paranoid approach is to assume the attackers have nabbed everything until proven otherwise), though rampant speculation is highly likely, especially when the CWU special web page for the data branch is totally uninformative (as of 5 PM, Mon 25th March 2024) - https://www.cwu.org/cwu-it-issues/
Very little transparency is probably a sign that the source is at least in some way correct.
Disparaging them and saying that they're not to be trusted sounds like a pretty desperate statement of someone under a lot of stress hoping to recover and brush it under the rug. The kind of behaviour that GDPR was hoping to prevent.
Does everyone have their incident bingo cards ready?
Sophisticated attack
Security our priority
Our members data is our highest concern
Our network was not breached our data was protected at all times
There is no evidence our network was breached
Your data is for sale on the dark web