Travelex: First UK systems restored after cyber ransom demand

skynews

text

Travelex, the foreign exchange operator held hostage by cyber attackers since New Year's Eve, has said a phased restoration of its global systems is under way.

The company said automated order placement systems used by UK banking partners, which include HSBC, Barclays and Virgin Money, were now live.

However, RBS and Tesco Bank later reported that their respective travel money sites, powered by Travelex, remained offline.

Travelex said VAT refund services at airports were also coming back to life.

Image:Online services first suffered a blackout on New Year's Eve

In-branch retail systems are currently being tested and "good progress" is being made on its UK-based international money transfer service, which Travelex says will relaunch by the end of the January.

The company is prioritising UK functionality because it's its largest market.

It made the announcement 18 days after

ransomware took hold of its services

and forced branch staff to serve customers with a pen and paper.

The Sodinobiki gang reportedly demanded a £4.6m ransom and threatened to release customer data including social security numbers, dates of birth and payment card information unless Travelex paid up.

The company insisted at the time there was no evidence that customer data had been breached.

It has not said if any ransom was paid.

Travelex is working with the National Cyber Security Centre and London's Metropolitan Police as part of a criminal investigation.