Britain’s biggest high street banks have been left unable to process foreign currency orders following the cyber attack on Travelex, which provides services for them.
Royal Bank of Scotland, Lloyds Banking Group, Barclays and HSBC are among more than a dozen major banks having problems after the New Year’s Eve ransomware attack.
While customers are still being offered services in branches for buying euros, dollars, and other foreign cash, banks are saying that orders cannot be processed online.
Travelex was forced to take all its global websites offline after an attack by the Sodinobiki gang, who are reportedly demanding a £4.6m ransom and threatening to release customer data including social security numbers, dates of birth and payment card information unless Travelex pays up.
London-headquartered Travelex is the world’s largest retail currency dealer and provides travel money services for a host of partners, also including the likes of Sainsbury’s Bank and Tesco Bank.
Its owner Finablr, which is based in the United Arab Emirates, said late on Tuesday it is not expecting a “material financial impact” from the online attack.
Travelex has opened an investigation and confirmed in the update that while there has been some data encryption, and the extent is not yet known, there is no evidence that structured personal customer data has been breached.
In a statement on Tuesday night, chief executive Tony D’Souza apologised for the inconvenience to partners and customers.
He insisted the group was “working tirelessly to bring our systems back online”.
A joint investigation between the National Crime Agency and the Metropolitan Police is ongoing.