Cyber Incident Victim: Parasol Group
Date:
Jan 2022
Location:
United Kingdom
Summary
A cyber attack caused significant IT outages at Parasol Group, disrupting payroll processing via the MyParasol portal and preventing invoice generation for agencies. The incident forced the implementation of alternative payment methods, including salary advances due to inaccessible employment data, while agencies were asked to submit remittance details manually to facilitate continued payments. Contractors expressed concerns over delayed wages and potential exposure of personal information, drawing parallels to a previous attack on another umbrella firm, though initial communications did not confirm the nature of the disruption. The company worked to restore systems and maintain support channels amid ongoing service interruptions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The Parasol Group, a UK-based umbrella company within the Optionis Group, experienced a significant IT systems outage beginning on or around January 12, 2022. The disruption primarily affected the MyParasol portal, a critical platform enabling contractors to submit timesheets for payroll processing. Greet Borsens, Parasol's Chief Sales Officer, notified customers via email that day, acknowledging the outage's impact on payroll operations while emphasizing continued telephone and LiveChat support availability. The company initiated proactive outreach to affected employees but could not immediately restore full functionality. By January 13, Parasol implemented alternative payment processes, issuing salary advances instead of fully calculated payments due to inaccessible employment data. This temporary measure required agencies to submit remittances containing worker names, hours worked, and payment amounts to facilitate emergency payroll processing, with promises to issue formal invoices once systems resumed.
On January 17, Parasol confirmed the incident as a cyberattack, though no technical details regarding attack vectors or threat actors were disclosed publicly. The prolonged outage prevented standard payroll operations, leaving numerous contractors unpaid and disrupting invoice generation for agencies. Contractors expressed frustration over payment delays and lack of transparency, with some drawing parallels to a September 2021 cyberattack on competitor Giant Group. Concerns about potential personal data exposure emerged on forums like offpayroll.org.uk, though Parasol did not address data compromise specifics. The company's switchboard and dedicated employee support lines became nonfunctional during the incident, hindering direct communication. Internal teams worked to restore systems while managing partial payroll through manual workarounds, though full service recovery timelines remained unclear by the last reported update.