Image copyright Google Image caption The company's IT team rebuilt its servers just in time to ensure staff would still receive their weekly wages The company said its IT team rebuilt its servers just in time to ensure staff would still receive their wages. During the attack, a hacker from a remote computer outside of the UK infiltrated a weakness in the company's system and began encrypting key files, Jon Cameron, group finance director, said. The firm said its IT team noticed suspicious activity and began to address it when a ransom request came through from the hacker. "Thankfully, the hacker didn't have chance to encrypt our back-up files, which meant that the IT team could restore function and prevent a potential catastrophe." Though one of the files targeted was the payroll file, the IT team's actions meant staff payments were not affected, the firm said.