British celebrities have had private information published on the ‘dark web’ after the company that represents them was hacked.
Bosses at The Agency have written to all of their clients – including Dame Emma Thompson and Doctor Who boss Russell T Davies – to warn them their data was leaked following an attack by cybercriminal group Rhysida.
They said the data – published on an encrypted area of the web often used by criminals – could include bank details and addresses.
An email from Stephen Durbridge at the London-based firm said: ‘We have learnt that the Rhysida group published the data stolen from us on the dark web, and while this has now been taken down the files were made publicly available in that space for approximately 72 hours.’
Clients were also urged to take steps to ensure their identities were not stolen.
We previously told how the criminals, who previously targeted the British Library in one of the UK’s largest hacks – causing damage estimated as up to £7m – threatened to publish the data online unless company bosses agreed to pay a ransom.
The Agency, which was established in 1995, represents many more of Britain’s leading writers, directors and creatives such as Oscar winning Bond film director Sir Sam Mendes and Happy Valley creator Sally Wainwright.
The firm’s clients also include Andrew Davies, the writer behind some of TV’s most successful literary adaptations including Pride and Prejudice, Bleak House and War and Peace, and the dramatists Hanif Kureishi and Peter Flannery.
Doctor Who boss Russell T Davies (pictured) was one of many British celebrities represented by The Agency to have their data leaked in the hack
The Agency’s high-profile clientele also includes actress and screenwriter Dame Emma Thompson
The details published by the hackers on an encrypted area of the web often used by criminals could include bank details and addresses (Stock Image)
Several emails were sent to clients highlighting the implications of the attack at the time.
In one email sent on Tuesday February 18, Bethan Evans, one of the company’s agents, wrote: ‘The Agency was subject to a ransomware attack by a criminal cyber group.
‘This caused a significant IT outage as the malware deployed encrypted company data files and prevented access.’
She added: ‘The Rhysida ransomware group, who have targeted many high-profile organisations in recent times (including, for example, the British Library), contacted us late last night to say that they are behind the attack.
‘They claim to have stolen data they will publish if not paid a ransom.’
In a separate email the next day, Mr Durbridge told clients he was ‘confident’ at that time the information had not been leaked.
Oscar winning Bond film director Sir Sam Mendes (right) is represented by The Agency
Happy Valley creator Sally Wainwright (pictured) is also represented by The Agency, which was established in 1995
He said: ‘Whilst we remain confident that no information has been made public as yet, we are advised that there is a reasonable chance the hackers will leak the files they stole.
‘Unfortunately, this does include some of your data.’
The firm is urging clients to take several steps to ensure their identities are not being stolen for financial gain.
This includes registering with a Fraud Prevention Service and obtaining a copy of their credit files so they can monitor any authorised transactions.
The Agency referred itself to the Information Commissioner’s Office which monitors all data breaches.
The Agency was unavailable for comment last night.