Dial up the drama
The drama always gets turned up to eleven* for things like this. I suppose ‘MoD hacked!’ is a better headline than service provider breached.
Those supply chains/partners can be tricky.
I don’t think they have a clue who did it right now. But it had to be made public because it’s a PII breach so requires notification asap.
Additional drama with not naming the provider. Which I don’t understand as folk tend to brag about winning public contracts like this - so it was literally two clicks away in your favourite search engine 🤷♂️
More interesting, it was 25% owned by the Cabinet Office until late last year, then fully sold to the majority partner. Who’s been a victim of ransomware themselves (2020) 🤷♂️
Due diligence and lessons learned are always good things.
(*Yes…Spinal Tap reference)