Payroll firm ‘Giant Pay’ Hit By Malware. Thousands Affected.

A UK based payroll company that maintains records of and pays out salaries to thousands of contractors has confirmed of a cyber breach on its systems. Following detection of suspicious activity the Giant Group, discontinued its online presence to protect the data from further damage. This step by the firm has left scores of contractors in a quandary.

The attack, carried out in the last week of September, forced the Giant Group, commonly known as ‘Giant Pay,’ to suspend its entire operations. As a result, the phone lines, email network and IT systems were inaccessible. The news of this incident spread when scores of contractors whose job was related to IT, could not contact with the company or perform payroll related tasks.

The company’s website carried an announcement soon after the incident came to light. It said, “ “Upon detection of suspicious activity on our network on 22nd September 2021, we immediately assembled a response team including IT data experts and specialist lawyers, and we are currently working with the highest priority to resolve this issue.

“As part of the investigation and as a measure of caution, we have proactively taken our systems offline and suspended all services temporarily.”

“As an interim measure, and to ensure that payment is made to your account on 24 September, we will pay you the same amount that was paid to you last week. This will be paid via Faster Pay and will be in your account by the end of the day. As soon as possible, we will confirm that your payroll is back to normal. We appreciate that this is not ideal, but we wanted to ensure that you receive a payment.

Another announcement informed the concerned contractors that Giant Umbrella was still working to resolve the technical issue that is “preventing us from getting the giant umbrella and giant accounts portals back up and running.”

In a statement issued last night, Giant Group said:
After recognizing that a sophisticated cyber attack has taken place, Giant Group approached international law firm Crowell & Moring to immediately mobilize a team of experts in the US, UK and Brussels. This has led to essential measures to facilitate ongoing investigation. Apart from this team, Giant Umbrella is also coordinating with ICO and the NCA besides other experts to take the investigation forward.

Initial investigations into the incident did not reveal who was responsible for the attack or whether this was a ransomware attack. The Group, therefore, was reluctant to say anything for sure. Britain’s NCA said that they were aware that an attack had taken place and that they are studying the situation to understand how it will impact the entire operations.

In spite of the difficulties because of suspended online operations, the company still managed to make interim payments to 8000 contractors, although they appreciate that not everyone has received payments. The company has earnestly apologized for the inconvenience and uncertainty that has prevailed for many days after the attack.

According to reports from irate workers, there are still some discrepancies over pay, which the firm says it hopes – but cannot confirm as yet – to resolve by the end of the week.

The company also confirmed that it had made interim payments to more than 8,000 contractors who are paid for work they do with other companies and organisations via the payroll services provider. It is not clear if everyone who is due money has been paid, or if they have received their full amount.

Giant Pay added: “Although we had no portals to operate from, we managed to pay over 8,000 workers last week. We appreciate that not everyone would have received their expected payment and for that we are sincerely sorry. We are aiming to be able to process your payroll and pay you by Friday.”

But these assurances and promises of swift actions to restore the services have failed to dampen irate contractors’ mood. Most of them expressed their anger on social sites in disbelief that a cyber attack has taken place. One payer had this to say:
“So here we are again, Giant hanging on to my money, the payment was made last week along with an advice note, yet it takes 5 days and counting to pay out. Another thing to be aware of is that they cannot invoice in any currency than GBP. Even if their invoices have an exchange rate box! Very unhappy…….”
Another one wrote:
“Still not paid, and it’s been 6 weeks now. There has been no contact whatsoever from them and you can’t get in touch either. Not good!
Yet another anonymous person fumed in a terse but matter-of-fact tone:
“5 weeks. No pay. Disgusting.”

The Freelancer & Contractor Services Association(FCSA) is in contact with Giant Umbrella and working closely to resolve the IT issues. Meanwhile Giant is working round the clock with dedicated staff to make amends and intends to take all the contractors into confidence at every stage of the recovery process.