"Staff have been warned personal data including national insurance numbers and in some cases bank details may have been stolen."

"In the UK, the payroll services provider Zellis is one of the companies affected and it said data from eight of its customers had been stolen."

This seems related to the SQL Injection attack notified by Progress recently:

https://community.progress.com/s/article/MOVEit-Transfer-Cri...