LONDON, June 5 (Reuters) – Tens of thousands of employees of British Airways, the UK drugstore chain Boots and Britain’s BBC were among those whose personal data was exposed following a wide-ranging breach centred on a popular file transfer tool, the organizations confirmed on Monday.

BA, the BBC and Boots said the breach occurred at their payroll provider, Zellis. The provincial government of Nova Scotia, in Canada, was also hit.

The data from Zellis and the Nova Scotia government was exposed through their use of the MOVEit file transfer software, both organizations said in separate statements. Zellis declined to say how many customers were affected.

The Nova Scotia government did not immediately return a request for comment. In a statement, Nova Scotia’s cyber security and digital solutions minister, Colton LeBlanc, said his r