
Duncan Lewis IT systems were hacked on Friday 23rd March 2018. The discovery was made through the course of Friday morning and our IT Department has been liaising with external IT Forensics since this time to try and ascertain the source and nature of this compromise and impact. Although Duncan Lewis are still in the process of ascertaining what has happened and the extent (if any) of this breach, Duncan Lewis has reported this matter to its regulatory bodies and the police. We will work with them in their investigations and queries.
Duncan Lewis has been implementing its Business Continuity Plan to restore the IT systems to ensure minimal impact to its clients.
Please direct all queries to the following email addresses jointly:oliviar@duncanlewis.com; sangeetas@duncanlewis.com;
Cyber Update on DL website – Final
Following the cyber incident on 23 March 2018, we promptly reported the matter to the SRA and ICO. Duncan Lewis has been open with the ICO and SRA and kept them both regularly updated. We can now confirm the SRA and ICO’s decision was not to take any action against us and they were satisfied with the steps that we had taken in terms of our ongoing IT procedures and communications to clients affected by the incident. We also made the Metropolitan Cyber Crime Unit with the Nation Crime Agency aware of the incident and they have also now closed their investigation.
Duncan Lewis understands that all our clients value their privacy and we take the protection of personal information very seriously. Duncan Lewis realises the concern that the incident must have caused for those impacted and we very much regret that the incident took place.
Duncan Lewis notified and worked with impacted clients as appropriate to advise and assist on protective measures and updates.