Welcome To The Data Leak Lawyers Blog

Ex-soldier prosecuted for posting vulnerable adult’s sensitive data on Twitter

The Information Commissioner’s Office (ICO) has released the details of a prosecution and a police undertaking after private and sensitive information was intentionally leaked on social media platform Twitter.

William Godfrey from Kent had been in a relationship with a probation officer when he came into possession of a USB data stick containing sensitive data. He later tweeted some of the sensitive data on the USB device and threatened to release more data as well.

For their part, Surrey Police signed an undertaking to improve their data protection policies and procedures.
read more

By Author

Council worker fined after being caught sharing personal data on Snapchat

It’s not only NHS workers who are breaching data protection rules by accessing medical records when they shouldn’t be. There’s also a worrying trend of data being breached by the rogue actions of employees, and with data being so easily shared nowadays, we remain concerned.

With a huge amount of councils lacking proper mandatory data protection training, you could argue there are potentially thousands of employees out there who don’t know any better. This is not good enough, and these prosecutions should serve as stern warnings to both employers and employees about breaching data protection rights by illegally sharing data.
read more

By Author

Why we’re not surprised that the number of UK Equifax cyber-hack victims has grown again!

At first, Equifax indicated there were some 300,000 UK victims of the Equifax cyber-hack, which then grew to 400,000, and eventually almost 700,000.

Now, we know Equifax has sent out warning letters to more than 860,000 of their UK customers, and we expect our client numbers to grow as more people are potentially able to join our Equifax action and claim compensation.

That’s more than double the original estimation, but this kind of thing is not uncommon at all. In fact, it can be incredibly hard to know exactly how many people are affected by a cyber-hack initially, and in some cases, it can be hard to know the exact numbers at all.
read more

By Author

Councils and local government authorities still failing to report data protection breaches

New information from the Big Brother Watch privacy group suggests that local authorities are still failing to report data protection breaches. In May 2018, the new GDPR legislation will come into force and councils will have to abide by regulations that will make the reporting of many data protection breaches compulsory.

But, aside from the impact the new laws may have, we cannot avoid the underlying issue here. With estimations that UK councils have been hit by almost 100 million cyberattacks in the last five years, the fact of the matter is that sensitive data is vulnerable in their hands.
read more

By Author

Fury over huge data protection breach involving child sexual abuse case files

Hundreds of confidential files have been found abandoned in a former office that had recently been vacated by the organisation Change, Grow, Live (CGL).

The entirely avoidable data leak included highly-sensitive records and documents involving vulnerable adults and children; i.e. confidential data that should be completely secure and never left open to being accessed without appropriate authority.

According to reports, files had literally been left behind after CGL vacated the premises.
read more

By Author

When 246,000 U.S. Department of Homeland Security Employees’ details are found on a home computer, it’s time to question data security

The U.S. reported a discovery of 246,000 sensitive personal records belonging to Department of Homeland Security (DHS) employees on a home computer owned by an employee. The department and its employees have a vital mission to “secure the nation from the many threats” the U.S faces.

One can only wonder if they ever suspect their own colleague to be a major security threat to their personal lives…

This, let’s face it, is the kind of thing we do not want to hear about. Although this story hails from across the pond, we’ve had our own issues of a similar nature of course. The Heathrow USB stick incident springs to mind.
read more

By Author

South African data breach compromises 30 million personal records

Creator and founder of HaveIBeenPwned.com, Troy Hunt, discovered yet another data dump last year. This one reportedly contained personal data belonging to millions in this staggering South African data breach.

At the time of discovery, the information was available from an online public database back-up file and even came with a smaller compressed version. Anyone on the site could download the information.
read more

By Author

Lessons learned: the university that came under fire for leaking sensitive and confidential data on its students

The University of East Anglia (UEA) was met with anger and disappointment from students and the general public when it was revealed that a member of staff made a horrific error when they sent out a spreadsheet listing named students’ extenuating circumstances. The spreadsheet identified some 40 students by name and student ID numbers, and had their private and confidential information right next to their names.

The spreadsheet showed which students were entitled to things like longer deadlines as their extenuating circumstances included personal matters such as family illnesses and bereavements; mental health problems, including depression; and even sexual assaults.
read more

By Author

Equifax hit by colossal class action after data breach victims suffer financial fraud

According to multiple sources, a significant number of Equifax customers have been targeted by criminals after their personal information was stolen in the massive Equifax breach. Unwilling to take the hit for Equifax’s incompetence and negligence, many are bringing a major class action claim in the U.S. to recover their losses.

We’re representing a large number of people who have come forward to seek compensation for the Equifax breach here in the U.K. as well. We firmly believe that victims should be entitled to compensation in a case of this nature.
read more

By Author

U.S. Supreme Court may be leaning towards increasing digital data protection; and the U.K. should follow

The Supreme Court justices were engaged in a lively debate over whether the government and law enforcement should be able to access huge amounts of digital data without a warrant. A majority of those involved in the debate appeared to agree that it would be very concerning and goes against data protection rules.

The U.S. Fourth amendment was mentioned a few times, citing an individual’s right to be protected from, “unreasonable searches and seizures by the government”. However, the key element here is whether a search is reasonable or unreasonable.
read more

By Author