Cyber Security Incident

28 April 2023

In early January 2023 we experienced a significant cyber security incident on our business. While the incident was detected relatively quickly, and we were able to limit the damage through rapid compartmentalisation of the network, the incident resulted in the encryption of a number of our applications and data storage systems, and damage to network devices.

Following the incident, we have been progressively restoring our networks and systems including rebuilding of certain applications and file systems where they were not recoverable. We have engaged a number of specialist organisations to help us with the restoration and with wider network security. In addition to restoring our systems and infrastructure, we are also accelerating our IT modernisation programme to improve our cyber defences and to provide greater resilience in the event of a subsequent incident.

7 February 2023

We would like to update you on how we are managing the consequences of a cyber security incident having detected unauthorised activity on our network. Immediate steps were taken to contain the incident, launch incident response plans, engage specialist support services and embark on restoring systems.

All manufacturing sites are operational, although some continue to use manual transaction processes as work continues to restore their systems. A small number of systems have proven irrecoverable and so we are accelerating the implementation of a new cloud-based ERP solution at the affected sites.

All appropriate regulatory authorities have been informed of the incident.

If you have an urgent enquiry and or need to discuss a new order, please email marketing@morganplc.com.

Any media enquiries, please contact group.communications@morganplc.com.

10 January 2023

We are currently managing a data security incident after internally detecting unauthorised activity on our network. Upon becoming aware of the data security incident on January 8, 2023, we promptly launched an investigation, engaged a third-party company to provide forensic IT services, and notified law enforcement and regulatory agencies of the data security incident.

The Company has taken various measures to contain and remediate the data security incident. Further, out of an abundance of caution, the Company has taken a limited number of servers offline. This has resulted in some issues with our email service. Systems will be restored once the investigation has confirmed it is safe to do so.

In the meantime, if you are an existing customer, you will be contacted by your dedicated customer service representative to continue to process existing and up-coming orders.

If you have an urgent enquiry and or need to discuss a new order, please email marketing@morganplc.com.

Any media enquiries, please contact group.communications@morganplc.com.

We appreciate your patience whilst we are working hard to resolve this issue and minimise disruption to our valued customers.