Welcome To The Data Leak Lawyers Blog

Fallout from the Equifax data protection breach lingers on as executive charged for selling shares prior to breach disclosure

If Equifax thought that news coverage of their huge data protection breach from last year was going away, they’re wrong.

We’re acting for a number of victims in the Equifax data breach after their servers were hacked into because they failed to update a known security soft spot, and detect the ongoing vulnerability. As a result of their clear failure to keep their systems updated, we consider there is a case for compensation.

Now, news of an Equifax executive being charged with “insider trading” has further fuelled the anger against the credit-monitoring giant whose servers were hacked last year.
read more

By Author

Trusted Quid data breach – some 66,000 payday loan customers hit by breach

We have already been contacted by people affected by the Trusted Quid data protection breach, and our Data Leak Lawyers have agreed to investigate cases.

As many as 66,000 customers of payday loan firm Trusted Cash, trading as Trusted Quid, may have had their data stolen due to an unauthorised access of their website. Customers affected by the breach are now at a greater risk of becoming a victim of fraud as key information was stolen in the breach.

Because of the nature of the data compromised in the cyberattack, this is a very serious data protection breach indeed.

read more

By Author

Councils ‘unprepared’ for cyber-attacks

According to information from a report by privacy advocates Big Brother Watch, despite assurances that local government authorities are taking data protection seriously, more than a quarter of UK councils have had systems breached in the last five years.

The report also found that the majority of the successful breaches were caused by the simple and well-known phishing method, pointing to staff as the “weakest link” in terms of cybersecurity and data defence.

The report also references the fact that three-quarters of councils reportedly do not provide mandatory cyber-security training, with 16% not providing any at all.
read more

By Author

Tesco Travel Money data protection breach advice

Back in 2016, the cybersecurity of Tesco Bank was rigorously questioned, when hackers were able to gain access to 9,000 customers’ accounts and steal £2,500,000.

Tesco also suffered a further breach last week were they reportedly cancelled a number of credit cards over a ‘third-party compromise’.

There has now been another breach where it’s estimated 17,000 Tesco Travel Money customers are subject to this new and massive data protection breach which happened through Travelex – a company that runs services on behalf of Tesco.

Names and payment information are amongst the data that has reportedly been compromised
read more

By Author

NHS Healthcare systems most vulnerable to data protection breaches caused by hackers

A recent study concluded that, in January, almost 40% of data protection breaches in a particular healthcare sector were caused by hacking.

Although the figures are from one study, and the results are relevant for the area of the study, the risk of NHS Trusts, doctors and hospitals falling victim to a hack is a serious and ongoing concern.

The 2017 “WannaCry” cyber-hack that specifically targeted older and more outdated systems hit the NHS hard. In fact, the UK faced a practical crisis in the immediate fallout of the hack.
read more

By Author

Leicester City Council accidentally send spreadsheet to taxi firms containing details of vulnerable adults and children

Leicester City Council accidentally sent an unsecured spreadsheet to 27 taxi firms that reportedly contained sensitive details of potentially thousands of vulnerable adults and children.

The error occurred as the local government authority were processing tenders for transport of people in care and people with special needs.

Although a recall email was sent, there is no telling just how far the data may have inadvertently spread.
read more

By Author

What would happen to Carphone Warehouse if their 2015 data protection breach happened after the new GDPR laws come into force?

Back in 2015, hackers were able to easily access the databases of Carphone Warehouse who had reportedly failed to fix known flaws in their cybersecurity which may have been known about the previous year. As a result of the failure to adequately secure their systems, they were hit with a successful cyberattack.

The final report from the Information Commissioner’s Office (ICO) was issued earlier this year, and Carphone Warehouse were hit with a £400,000 fine – one of the largest fines the ICO has ever issued.

With the new GDPR laws set to come into force in May 2018, wouldn’t it be interesting to see what would happen to Carphone Warehouse if this breach took place after the new data protection rules were in place?
read more

By Author

Gwent Police to be investigated over “hiding” data protection breach

Worryingly, the police occupy one of the top spots in terms of organisations at the centre of data breaches, data leaks and hacks. Victims whose data is compromised in a data protection breach deserve to be notified as soon as possible, but it’s not unheard of for an organisation to “hide” a data breach as opposed to facing up to it and dealing with it.

Reportedly, Gwent Police are to be investigated for doing just that.

News sources say that Gwent Police are being investigated for failing to inform hundreds of individuals that their data protection rights had been breached.
read more

By Author

NHS staff accessing neighbour’s medical records is NOT okay

There is a recent worrying trend of NHS staff being caught out snooping on people they know, or are related to, by abusing their powers to access their medical records.

Let’s be absolutely clear: it is NOT okay for any member of the NHS to access their neighbour’s medical records without good reason or due authorisation.

If you are informed that a member of the NHS staff has accessed your medical records in such a way, or if you discover it has happened, you may be entitled to claim for data protection breach compensation.
read more

By Author

ICO study deems website privacy notices are too vague and inadequate

National statistics suggest that 87.9% of all adults in the U.K. use the internet. With some 45.9 million internet users, almost all Britons have access to the internet at work or for leisure.

Most of us carry a smartphone or an internet-connected device and are regularly checking the news, making purchases, watching videos, or logged in to social media. In one day, we may have visited over 20 sites, and the question is: how many of these take information about you and use it without your knowledge or consent? How many websites are truly safe?
read more

By Author