Yodel becomes the latest victim of a cyber 'incident'
- Reference: 1655889310
- News link: https://www.theregister.co.uk/2022/06/22/yodel/
- Source link:
Rooted firmly to the [1]bottom of the table of best and worst courier firms by consumer campaigner Which? Yodel has gained popularity and, perhaps, a bit of notoriety in recent years as consumers turned to courier companies rather than venture into physical stores.
[2]
Click to enlarge
Exactly when security problems began is difficult to ascertain, since Yodel's social media voicebox is crammed full of disgruntled customers wondering where their products are (indeed, this writer had the joy of a piece of hardware being lifted from one of the company's depots back in 2019, but that's another story...).
However, by June 21 the company changed its customer service narrative to "Yodel is currently experiencing operational disruption affecting our delivery service."
Yodel's website was also updated to reflect that its services were not at all well.
[3]
The Register contacted the company to find out what was happening, and a spokesperson said: "Yodel has experienced a cyber incident that has caused some disruption. We are servicing customers but tracking is currently impacted.
[4]UK parcel firm Yodel plugs tracking app's random yaps about where on map to snap up strangers' tat
[5]Self-driving vehicles might be autonomous but insurance pay-outs probably won't be
[6]Self-stocking internet fridge faces a delivery come down
[7]Boston Dynamics' latest robot is a warehouse workhorse
"As soon as we detected the incident, we launched an investigation, led by our internal IT division and supported by an external IT forensics group. We are working to restore tracking as quickly as we can and have engaged with all relevant authorities.
"Yodel would like to sincerely apologise to their clients and their customers for any disruption this incident may have caused, and reassure them that the team are working around the clock to resolve this incident."
[8]
[9]
Other communications were shared on social media, suggesting that the incident was indeed serious. The Register contacted the ICO for more information and will update with any response.
"We are working around the clock to get all systems back and running as quickly as we can and are being supported by an expert, external, forensic group. We have also engaged with the National Cyber Security Centre and have notified both the National Crime Agency and the ICO"
/4 — Adam Smith (@Adam_Smith_PHD) [10]June 21, 2022
Yodel is part of Logistics Group Holdings, and according to Companies House filings
[11]PDF
, it recorded earnings before income tax, depreciation and amortisation of £65.7 million in fiscal 2021, up from £9.5 million in 2020.Yodel is just the latest victim of a cyber "incident" and undoubtedly will not be the last. The company's experience is a reminder of the importance of both robust defences and a robust recovery plan.
As for its customers… well, far be it from us to wonder if a lack of service will be all that different to normal service. ®
Get our [12]Tech Resources
[1] https://www.which.co.uk/reviews/best-and-worst-shops/article/best-and-worst-delivery-companies-adzRt3m47ABD
[2] https://regmedia.co.uk/2022/06/21/yodel.jpg
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YrLoR6X2bpzAXaGaqhqCLwAAAJQ&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.theregister.com/2019/12/03/yodel_tracking_app_security_flaw/
[5] https://www.theregister.com/2015/10/17/selfdriving_vehicles_might_be_autonomous_but_insurance_payouts_probably_wont_be/
[6] https://www.theregister.com/2016/09/09/selfstocking_internet_fridge_faces_a_delivery_come_down/
[7] https://www.theregister.com/2022/04/02/boston_dynamics_robot_stretch/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YrLoR6X2bpzAXaGaqhqCLwAAAJQ&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YrLoR6X2bpzAXaGaqhqCLwAAAJQ&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[10] https://twitter.com/Adam_Smith_PHD/status/1539208818856542209?ref_src=twsrc%5Etfw
[11] https://find-and-update.company-information.service.gov.uk/company/08110833/filing-history/MzM0MTgzMTMyNmFkaXF6a2N4/document?format=pdf&download=0
[12] https://whitepapers.theregister.com/
With apologies to Luther!
To dream the impossible dream
To fight the unbeatable foe
To bear with unbearable sorrow
And to run where the brave dare not go
.
To right the unrightable wrong
And to love pure and chaste from afar
To try when your arms are to weary
To trace the untraceable parcel
.
This is my quest
To follow that parcel
Ooh, no matter how hopeless
No matter how far
To fight for the right
Without question or pause
To be willing to march, march into hell
For that heavenly cause
.
And I know
If I'll only be true
To this glorious quest
That my heart
Will lie peaceful and calm
When I'm laid to my rest
.
And the world will be better for this
Oh, that one man, scorned and covered with scars
Still strong with his last ounce of courage
To trace the untraceable, the untraceable
The untraceable parcel
.
Yeah, and I'll always dream
The impossible dream
Yes, and I'll trace
The untraceable parcel
Around the clock
So they apparently working around the clock, but shouldn't they be working around their laptops at very least?
Yodel has gained popularity and, perhaps, a bit of notoriety in recent years as consumers turned to courier companies rather than venture into physical stores.
Aren't the consumers the companies selling the tat rather than the people (hopefully) getting the goods?
Icon because end-consumers have little choice -->
"a reminder of the importance of both robust defences and a robust recovery plan"
Plus a mechanism for learning from incidents so they don't recur. In over two decades of consulting I've never seen a DR plan that explicitly required (or even formally provided for) such learning for the future. They've all just stopped at bringing the organisation back to normal this time round.