London & Zurich

London & Zurich is a UK‑based organisation that provides direct debit payment processing services. Its headquarters are located in the United Kingdom. As a direct debit provider, it enables businesses to collect recurring payments from customers via the direct debit scheme. The organisation serves merchants and other entities that rely on its platform to manage payment collections. Its core offering centres on facilitating secure and automated debit transactions for clients.

On 8 November 2023, London & Zurich experienced a ransomware attack that disrupted its operations. The attack prevented multiple customers from processing payments, resulting in significant backlogs described as six‑figure in value. The outage caused cash flow difficulties for affected businesses, with some seeking emergency loans and facing payroll uncertainties. Communication during the incident was criticised as inconsistent, with conflicting restoration timelines adding to confusion. The company responded by rebuilding its environment in a new infrastructure and gradually restoring services such as API access and customer portals over several weeks. Payment schedules dating back to the breach required resubmission, with partial recoveries processed days after collections resumed. While the firm confirmed containment and involvement of third‑party forensic investigators, it did not disclose details about potential data compromise, attacker identity, or the initial breach vector.