One Call Insurance

One Call Insurance provides insurance services as its core business activity. The company is headquartered in the United Kingdom. It manages customer data that includes sensitive information such as passwords and bank details. Being based in the UK, it is subject to regulatory oversight by the Information Commissioner’s Office and other industry regulators.

On 13 May 2021, One Call Insurance was targeted by a ransomware attack conducted by the Darkside gang. The attackers demanded a payment of £15 million to prevent the public release of the compromised customer data. The ransomware incident caused significant disruption to the organisation’s IT systems. In response, One Call Insurance engaged forensic specialists to restore services in a newly secured environment. During the recovery, the company prioritised the restoration of its customer support systems. Investigations were initiated to determine whether any customer data had been actually exfiltrated or compromised. The breach was reported to the Information Commissioner’s Office and relevant industry regulators. Darkside’s involvement in this attack highlights the group’s continued criminal activity despite earlier claims of disbanding. Furthermore, the gang has been linked to the Carbanak cybercrime operation, which is known for conducting financial malware attacks.