Welcome To The Data Leak Lawyers Blog

Freedom of press vs data protection – the big debate

As we prepare ourselves for the General Data Protection Regulation, an updated version of the Data Protection Bill is making its way through Parliament. The bill will hopefully give people more control over their personal data and greater enforcement powers when organisations don’t keep it safe or misuse it.

In addition to this, the House of Lords changed the way reporters can obtain and use personal information in the name of public interest. This means individuals can make a claim for their private information not to be disclosed before it’s already plastered on the headlines.

Some news outlets are not happy about it!
read more

By Author

Equifax data hack: the damage has only just begun…

“On a scale of 1 to 10 in terms of risks to consumers, this is a 10” – says fraud analyst, Avivah Litan on the Equifax data hack.

It has been months since the Equifax hack, but calamity isn’t about to quieten down anytime soon as the hacking exposed confidential information belonging to some 145 million customers, including almost 700,000 in the U.K.

This particular breach is distinct to others because of the wealth of information stolen combined with the company’s somewhat questionable attempts to mitigate the damage…
read more

By Author

After compromising over 145 million people’s financial data records, Equifax responds by producing an app…

Equifax have faced heavy criticism for a series of failings around the data breach that exposed over 145 million people’s personal data records, with almost 700,000 Brits caught up in the scandal. It was bad enough that a company responsible for credit referencing was easily hacked, especially given that the hack was down to Equifax failing to patch a known security vulnerability.

Their handling of the breach has been heavily criticised by authorities, experts and regulators. There are allegations of delays and failures to report the breach; an arguably dangerous website set up for people to check whether they were affected (which fraudsters can copy to lure people to give away information); and now an app, which is arguably one of worst offenders in terms of breaches and leaks of information.
read more

By Author

Nursing and Midwifery Council dismisses NHS midwife for snooping on medical records

A ‘nosy’ midwife has been sacked by the University Hospitals of Coventry and Warwickshire NHS Trust after she was discovered to have viewed confidential medical records belonging to friends, colleagues and other acquaintances.

Thirty-eight-year-old Vicky Anne Bloxham lost her job as a midwife for the illegal snooping carried out between 2002 and 2016.

In 2016 alone, Bloxham reportedly reviewed the medical records of some 45 friends and acquaintances without authorisation, with one person’s records accessed 13 times in a four-month period.
read more

By Author

USB device containing confidential Heathrow Airport data found miles away on a London residential street

Confidential and secretive information for Heathrow Airport was reportedly found on a USB device some 13 miles from the site in a random London neighbourhood, prompting questions over the quality of the U.K.’s airport security.

The data on the device was also found to have had no encryption and wasn’t even password-protected; arguably the most rudimentary security measure that should be implemented for any type of information worth protecting.

How confidential data concerning the U.K.’s largest airport – and potentially a huge target for terrorist attacks – could be removed in this manner is incredibly worrisome.
read more

By Author

Australian ‘Amazing Rentals’ uploads thousands of personal documents online

Australian appliance-rental company, Amazing Rentals, are in trouble with Australian authorities yet again for behaviour that has prompted government discussions over the need to crack down on bad business behaviour.

Around mid-September this year, the Guardian reported that Amazing Rentals “published 26,000 personal documents involving 4,000 customers on the internet.” No further information was provided as to what the details included, but clear concerns were aired over identity theft and credit fraud.

The Australian Information Commissioner’s Office shut down Amazing Rental’s website shortly thereafter and warned the retailer’s customers to take precautions against identity theft and other forms of fraud.
read more

By Author

All Wi-Fi networks reportedly vulnerable to hacking

Security experts warn that all Wi-Fi networks are vulnerable to hacking after a Belgian researcher managed to break through a protective security protocol implemented in most of the world’s routers.

Whilst unsurprising, given all the major hacks that have happened lately (Yahoo, Equifax, HBO), confirming it still makes us all feel a little uneasy.

The researcher, Mathy Vanhoef, was studying the WPA2 security protocol used in wireless networks when he came across the vulnerability, and the result means that all devices that have a Wi-Fi connection could be affected by the weakness.
read more

By Author

ICO publishes useful guides on the new GDPR

Head of policy and engagement at the Information Commissioner’s Office, Jo Pedder, points to useful guidance on the new EU General Data Protection Regulation that is set to come into force come May 2018.

The regulation will bring in some major changes as to how organisations are expected to look after personal data and the responsibilities in disclosing them to the authorities and affected individuals. The changes could mean huge punishments for organisations who fail to take their data protection responsibilities seriously.
read more

By Author

Dyfed-Powys Police Force signs undertaking after multiple data breaches reported

Dyfed-Powys Police Force in Wales signed an undertaking with the Information Commissioner’s Office (ICO) after a number of data breaches over an 18 month period were identified.

The ICO was alerted to the seriousness of multiple incidents that indicated a potential lack of data protection training and protocols. Although none of the breaches appear to have had any underlying malicious intent, the ICO recognised the seriousness of the repeated data breaches.
read more

By Author

Equifax hack compromised 15.2 million U.K. records

The gigantic Equifax data breach that saw 143 million U.S. customers have their sensitive credit information breached also affected 15.2 million U.K. records as well. There are thought to be some 700,000 U.K. victims of the breach who may have had their personal and sensitive information stolen.

Equifax has said they will reach out to victims by post to notify them of the data breach and offer free access to some form of data risk mitigation service.
read more

By Author