UCL Human Resources


SAUL response to cyber incident and data breach

23 June 2023

The Superannuation Arrangements of the University of London (SAUL), one of UCL’s pension schemes, has informed us of a data breach. The data breach follows a cyber incident affecting a piece of software they use called ‘MOVEit’.

UCL Portico

SAUL’s investigation has shown that this incident involved a third party accessing the personal data of members of SAUL. SAUL inform us that it has not affected bank details, credit or debit card information or passwords, and that their pensions will continue to operate as normal. The breach has been reported to the Information Commissioner’s Office (ICO) and the Pensions Regulator.

We recognise that this may be worrying for you. We are sharing guidance and the information that has been communicated to us by SAUL.

SAUL will initially be writing to members directly to make them aware of the data breach, outline the steps that they are taking and to provide further advice. They will be in touch with further information and advice as soon as this is available. SAUL is also providing a one-year membership, free of charge, to Identity Plus, a monitoring service provided by the credit reference agency Experian which can help you detect possible misuse of your personal information and provide identity monitoring support. Details of how to access this will be in their communications. 

If you have any questions, we recommend that you contact moveitincident@saul.org.uk.

Advice on cyber security, spotting scams and identity fraud 

We would encourage staff to always be aware of good practice around cyber security, spotting scams and identity fraud. It is important to be vigilant to spot any signs of attempted scams or people trying to use your data to impersonate you.

You can find guidance on how to recognise and report emails, texts, websites, adverts or phone calls that you think are trying to scam you on the National Cyber Security Centre website.

Identity fraud involves the use of a person’s stolen details to commit a crime. The Metropolitan Police have published guidance on some of the ways we can be aware of, detect it early and help prevent this, including protecting your address, bank accounts, phone, computer and property.

The National Fraud & Cyber Crime Reporting Centre and the Information Commissioner’s Office (ICO) also provide useful guidance and resources around cyber security and scams.

Accessing support  

We recognise that this news may cause worry for some of our staff who are SAUL members, and UCL offers free and confidential, 24/7 wellbeing support by phone, WhatsApp or Live Chat on 0808 196 5808, or further resources on our wellbeing pages.

With best wishes,
Donna Dalrymple, Chief People Officer