// INCIDENT · 2024-03 · PUBLIC SECTOR / PENSIONS

Government Pensions Administration Agency (GPAA).

Ransomware. GPAA initially said no breach had occurred, then confirmed in March 2024 that certain systems were compromised after LockBit released data. Systems shut down to isolate affected areas; pension payments not affected.

← All tracked breaches
Date2024-03
SectorPublic sector / pensions
TypeRansomware
Records668 GB of data (claimed by attackers)
AttackerLockBit
StatusConfirmed by GPAA; full extent not published

How the attack happened.

LockBit ransomware attack with data exfiltration; access attempt first detected on 16 February 2024

Impact.

GPAA initially said no breach had occurred, then confirmed in March 2024 that certain systems were compromised after LockBit released data. Systems shut down to isolate affected areas; pension payments not affected.

Primary sources.

Would your business survive this happening to you?

Most SA SMBs do not have the detection or incident-response capability to answer that honestly. We can help you work out where your real gaps are.

Talk to us → See our cybersecurity services