It affects payroll company Zellis, which is understood to have used file transfer tool MOVEit.

There are reports the hack has suspected links to a Russian-speaking gang.