Personal data of A-list customers of a luxury organic farm shop leaked after Russian ransomware attack

0

The personal data of celebrities such as Jeremy Clarkson, the Duchess of York and Sir David Attenborough leaks onto the dark web after Russian ransomware attack on luxury organic farm

  • Russian criminals hack into luxury food company Daylesford’s database
  • The leak came after the company’s business denied the hackers’ request for a large ransom payment
  • Experts warn hack is ‘red flag’ as concerns over cyberattacks grow
  • Details of Duchess of York, Jeremy Clarkson and Sir David Attenborough leaked

The personal details of the Duchess of York, Jeremy Clarkson and Sir David Attenborough have been leaked by Russian criminals who hacked into the database of luxury food company Daylesford, The Mail on Sunday can reveal.

The King’s cousin Lady Sarah Chatto, Tim Henman and snooker star Ronnie O’Sullivan are among other celebrity clients whose details have been published on the so-called dark web – a hidden part of the internet used by criminals .

Experts have warned the hack is “a wake-up call” amid growing concerns over Kremlin cyberattacks on Britain.

The personal details of the Duchess of York, Jeremy Clarkson and Sir David Attenborough have been leaked by Russian criminals who hacked into the database of luxury food company Daylesford

Daylesford Organic is owned by Lady Carole Bamford (left), wife of Tory billionaire donor and JCB construction owner Lord Bamford (right), and named after the Cotswold village where they live.

Daylesford Organic is owned by Lady Carole Bamford (left), wife of Tory billionaire donor and JCB construction owner Lord Bamford (right), and named after the Cotswold village where they live.

Former Top Gear presenter Jeremy Clarkson is among those whose details have been leaked by Russian hackers

BBC presenter Sir David Attenborough is among those whose details were leaked by Russian hackers

Jeremy Clarkson and Sir David Attenborough are among those whose details have been leaked by Russian hackers

The leak came after the company’s company denied the hackers’ demand for a hefty ransom payment in the Bitcoin cryptocurrency.

After the blackmail attempt failed, the gang – known as ‘Snatch Team’ – released personal information and courier delivery notes showing customers’ home addresses.

Daylesford Organic is owned by Lady Carole Bamford, wife of Tory billionaire donor and JCB builder Lord Bamford, and named after the Cotswold village where they live.

Sarah Ferguson, the Duchess of York, is a customer at the upmarket Cotswolds Daylesford farm shop

Sarah Ferguson, the Duchess of York, is a customer at the upmarket Cotswolds Daylesford farm shop

Snooker star Ronnie O'Sullivan is among other celebrity clients whose details have surfaced on the so-called dark web

Snooker star Ronnie O’Sullivan is among other celebrity clients whose details have surfaced on the so-called dark web

The business is said to have delivered food to Boris Johnson during the lockdown, but the former prime minister is not among the customers whose details have been leaked.

Daylesford announced it was hacked in June 2021, but said no personal information was compromised.

But since then hackers have uploaded a vast cache of stolen files measuring a whopping 80 gigabytes onto the dark web.

Among Daylesford’s leaked files are purchase orders from wealthy customers, purchase receipts from Lord and Lady Bamford and sensitive data including staff grievances, confidentiality agreements and banking information.

As well as a farm store on the Bamfords’ Gloucestershire estate – Daylesford House – the company also has four stores in London and an online store.

Stars attracted to £50 honey

Dubbed ‘Britain’s fanciest farm shop’, Daylesford was founded in 2002 by Lady Bamford at her country estate in the Cotswolds.

It features “award-winning fresh produce, artisan ingredients, high-quality meat and essential pantry items from our organic farm…delivered to your door,” including a “limited edition” jar of honey of 800 g for £50, a £25 tin of loose leaf green tea and a 500ml bottle of olive oil for £30.

Two months ago, former Prime Minister Boris Johnson and his wife Carrie held their wedding party at Daylesford House, the Grade I listed home of the Bamfords.

The business, which has nearly 800 employees and a turnover of almost £50m a year, was founded after Lady Bamford started giving her children organic food.

Daylseford offers 'award winning fresh produce and pantry essentials' including manuka honey - the pictured jar sells for £29.99

Daylseford offers ‘award winning fresh produce and pantry essentials’ including manuka honey – the pictured jar sells for £29.99

Experts said the hackers likely used a computer virus known as ransomware hidden in an email attachment to break into the company’s computer systems. Snatch Team all appear to be Russian-speaking, according to a 2019 report from security firm Sophos. They hacked McDonald’s on February 24 this year, the day Russia invaded Ukraine.

Former British Military Intelligence Colonel Philip Ingram said last night: ‘This cyberattack should be a wake-up call for security services and businesses. Daylesford is exactly the kind of company that would be viewed by Russian-based hackers as both a lucrative ransomware opportunity and a potential utility for Kremlin power brokers.

Analysts warn that global cyberattacks have increased by 32% over the past year. Security firm Acronis said ransomware attacks were the biggest threat to businesses and governments, and warned that damages could top £26bn by the end of the year. Businesses face millions of attempts on their IT systems every day.

British intelligence has warned of an increased risk from Russian hackers due to the war in Ukraine. The National Cyber ​​Security Center said “the cyber threat to the UK remains heightened”.

The Information Commissioner’s Office said: ‘Daylesford Organic has informed us of an incident. After reviewing the information, we have issued data protection advice and closed the case. Daylesford did not respond to a request for comment.

Advertising

Share.

Comments are closed.