Cybersecurity sites have been reporting that Deloitte UK’s been hacked by ransomware group Brain Cipher after the group claimed they’re in possession of a (compressed) terabyte of data from the King’s Green Dot.
The r/consulting reaction to this news is golden:
Let no one claim consultants aren’t funny.
Anyhoo, as expected Deloitte has something to say about this and it’s “nuh uh!”
“We are aware of the claims by the threat actor,” a spokesperson from Deloitte told SecurityWeek. “Our investigation indicates that the allegations relate to a single client’s system which sits outside of the Deloitte network. No Deloitte systems have been impacted.” So it is slides then.
Brain Cipher had this to say about Deloitte’s security:
Reminder that Deloitte calls themselves “market leaders in cyber.”
This is the second hacking incident for the Deloitte brand this quarter, the earlier incident having occurred in September when BreachForums user IntelBroker said they’d exploited an Apache Solr server using default login credentials to extract a large volume of internal data including email addresses and internal communications on Deloitte’s intranet.
In the above instance, Deloitte acknowledged the breach as legitimate but said an investigation “has found no threat to client data or other sensitive data related to this incident.” Probably just a bunch of people bitching about their managers and clients.
All the good times at the Deloitte – 
Tbh, it’s generally well known that Deloitte are a bit of a waste of time. Anyone who has used their services will agree. They just produce shelfware and PowerPoints that state literally nothing. People only work there to put it on their CVs, but the funny thing is any hiring manager who knows what they’re doing will avoid anyone who has worked at Deloitte (or EY etc).
Just ask any CISA who works at Blue Cross Blue Shield of Rhode Island
how good Deloitte is at protecting assets.