GBG Bulletin Page

On Tuesday 28 August, Imperva informed us they are investigating a security incident on their platform that has potentially impacted some of their customers.

Imperva has confirmed that GBG data has NOT been exposed, but we are still following their best practice guidelines and re-issuing the custom SSL certificates we have in place, as routine security procedure.

Whilst this should have minimal impact on your business, please see the following guide for each of our solutions, and who to contact if you have any questions:

GBG ID3global and URU

Date of Change 12th September 2019: 0830 – 0900 BST

Change: Replacement of SSL Certificates for

Portal Users (accessing via an Internet Browser)

  • The change should not affect your ability to access the platform as it is a direct replacement of the existing certificate that has been replaced in this way several times before and is seamless to internet browsers.

Integrated Clients (connecting directly from your systems)

  • Any changes to certificates are normally automatically picked up. However, we are aware that some client integrations require the certificates to be applied within the certificate library of their systems and can provide the Prove-URU certificate to assist with this if need be. Please contact helpdesk@gbgplc.com if you require this certificate.

If you have any issues or questions regarding this planned work you can contact our helpdesk at ID3globalhelp@gbgplc.com or call us on 0844 888 1136.

 

GBG IDscan

Date of Change 12th September 2019: 0830 – 0900 BST

Change: Replacement of SSL Certificates for

  • *.idscan.cloud

This affects our Mobile Journey Capture Service, iOS and Android SDK(s) where SSL pinning has been implemented.

Portal Users (accessing via an Internet Browser) using Capture Studio, Investigation Studio, Analytics Studio, and Administration Portal:

  • The change should not affect your ability to access the platform as it is a direct replacement of the existing certificate is seamless to internet browsers.

If you have any issues or questions regarding this planned work you can contact our helpdesk at helpdesk@gbgplc.com or call us on 0844 888 1136.

 

GBG KnowYourPeople, GBG OnlineDisclosures and GBG AdvancedCheck

Date of Change 12th September 2019: 0830 – 0900 BST

Change: Replacement of SSL Certificates for

  • kyp.gbgplc.com
  • gbg.onlinedisclosures.co.uk
  • Secure.advancedcheck.co.uk

Portal Users (accessing via an Internet Browser):

  • The change should not affect your ability to access the platform as it is a direct replacement of the existing certificate that has been replaced in this way several times before and is seamless to internet browsers.

If you have any issues or questions regarding this planned work you can contact our helpdesks at:

 

GBG Loqate (Matchcode 360) and Connexus

Date of change: [12th September 2019: 20:00 – 22:00 BST]

Change: Replacement of SSL Certificates for:

  • www.idmp.gb.co.uk

Portal Users (accessing via internet browsers)

  • The change should not affect your ability to access the platform as it is a direct replacement of the existing certificate that has been replaced in this way several times before and is seamless to internet browsers.

Integrated Clients (connecting directly to idmp.gb.co.uk from your systems)

  • Any changes to certificates are normally automatically picked up. However, we are aware that some client integrations require the certificates to be applied within the certificate library of their systems and therefore we can provide the idmp.gb.co.uk SSL certificate to assist with this if needs be.

Should you require (additionally) obtaining the original Root or Intermediate certificates direct from the issuing authority - these can be obtained here:

  • Root - https://support.globalsign.com/customer/en/portal/articles/1426602-globalsign-root-certificates “GlobalSign Root CA-R3"
  • Intermediate- https://support.globalsign.com/customer/en/portal/articles/1219303-organizationssl-intermediate-certificates “GlobalSign RSA OV SSL CA 2018”

If you have any issues or questions regarding this planned work, you can contact our GBG Helpdesk via email or telephone. helpdesk@gbgplc.com +44 (0) 1244657321.

.red { fill: #b0013a; }