Brookson Group

Brookson Group, headquartered in the United Kingdom, operates as a provider of business services with a notable focus on payroll processing. The organisation manages sensitive financial and personnel data for its corporate clients, handling critical functions that are essential for client operations. Its service model involves the secure management of customer and supplier information, positioning it within the business process outsourcing sector. The incident response details confirm that payroll is a time-critical function they deliver, indicating a core competency in accurate and timely financial administration for other businesses. This role requires strict adherence to data protection standards and robust operational continuity planning to serve its client base reliably.

The organisation's approach to a significant cyber incident in January 2022 illustrates its operational protocols and regulatory engagement. Upon detecting an aggressive attack, Brookson Group immediately contained the threat, preventing data exfiltration and proactively isolating services from external networks. This decisive action was taken to protect the integrity of the customer and supplier data under its care. The response involved coordination with external forensic experts and transparent, ongoing communication with stakeholders via email despite phone system outages. A priority was the rapid restoration of payroll services to minimise client disruption. Furthermore, the incident was formally reported to the UK National Cyber Security Centre, demonstrating a established procedure for engaging with national cybersecurity authorities during a breach. This event underscores the organisation's emphasis on data security, incident management, and regulatory compliance within its service delivery framework.