Special delivery: Yodel becomes the latest victim of a cyber ‘incident’

Delivery company Yodel has found itself the latest victim of a cyber “incident” that has disrupted services.

Rooted firmly to the bottom of the table of best and worst courier firms by consumer campaigner Which? Yodel has gained popularity and, perhaps, a bit of notoriety in recent years as consumers turned to courier companies rather than venture into physical stores.

Exactly when security problems began is difficult to ascertain, since Yodel’s social media voicebox is crammed full of disgruntled customers wondering where their products are (indeed, this writer had the joy of a piece of hardware being lifted from one of the company’s depots back in 2019, but that’s another story…).

However, by June 21 the company changed its customer service narrative to “Yodel is currently experiencing operational disruption affecting our delivery service.”

Yodel’s website was also updated to reflect that its services were not at all well.

The Register contacted the company to find out what was happening, and a spokesperson said: “Yodel has experienced a cyber incident that has caused some disruption. We are servicing customers but tracking is currently impacted.

“As soon as we detected the incident, we launched an investigation, led by our internal IT division and supported by an external IT forensics group. We are working to restore tracking as quickly as we can and have engaged with all relevant authorities.

“Yodel would like to sincerely apologise to their clients and their customers for any disruption this incident may have caused, and reassure them that the team are working around the clock to resolve this incident.”

Other communications were shared on social media, suggesting that the incident was indeed serious. The ICO has been contacted for more information and we will update this section with any response.

Yodel is part of Logistics Group Holdings, and according to Companies House filings [PDF], it recorded earnings before income tax, depreciation and amortisation of £65.7 million in fiscal 2021, up from £9.5 million in 2020.

Yodel is just the latest victim of a cyber “incident” and undoubtedly will not be the last. The company’s experience is a reminder of the importance of both robust defences and a robust recovery plan.

As for its customers… well, far be it from us to wonder if a lack of service will be all that different to normal service.

Suggest an edit to this article

Go to Cybersecurity Knowledge Base

Got to the Latest Cybersecurity News

Go to Cybersecurity Academy

Go to Homepage

Stay informed of the latest Cybersecurity trends, threats and developments. Sign up for our Weekly Cybersecurity Newsletter Today.

Remember, CyberSecurity Starts With You!

• Globally, 30,000 websites are hacked daily.
• 64% of companies worldwide have experienced at least one form of a cyber attack.
• There were 20M breached records in March 2021.
• In 2020, ransomware cases grew by 150%.
• Email is responsible for around 94% of all malware.
• Every 39 seconds, there is a new attack somewhere on the web.
• An average of around 24,000 malicious mobile apps are blocked daily on the internet.

 24,757 total views,  2 views today

• About
• Latest Posts

Connect

RiSec.n0tst3

Hello! I'm Steve, an independent security researcher, consultant and analyst from Scotland, UK.

I've had an avid interest in Computers, Technology and Security since my early teens. 20 years on, and, it's a whole lot more complicated...

I've assisted Governments, Individuals and Organizations throughout the world. Including; US DOJ, NHS UK, GOV UK.

Connect

Latest posts by RiSec.n0tst3 (see all)

• OctoBot WebInterface – Remote Code Execution (RCE) – 0.4.3 - 21 July 2022
• Dangerous ‘Lightning Framework’ Linux malware installs rootkits, backdoors - 21 July 2022
• Atlassian Patches critical Confluence hardcoded credentials flaw - 21 July 2022