The outsourcing firm Serco was targeted by the Babuk ransomware group. The attackers tried to terminate various security and recovery services as well as database, browser, and email programs and copied more than 1TB of your data. The attack had impacted the company's mainland European operations. The attackers threatened the company with "consequences" if it wouldn’t cooperate.

The outsourcing company Serco accidentally shared the email addresses of almost 300 contact tracers recruited to assist in the UK government’s coronavirus “test, track, and trace” strategy. Serco is among the companies that are recruiting, coaching, and managing contact tracers who do not have clinical training. The email addresses were shared when Serco was contacting new recruits about training. The 296 email addresses were exposed when a member of staff at Serco wrote to trainees asking them not to contact the helpdesk if they had questions about training.