Welcome To The Data Leak Lawyers Blog

Researchers say catastrophic data breach is inevitable by 2021

According to researchers at the Raytheon and the Ponemon Institute, a staggering 80% of IT and cybersecurity experts believe we may be headed for a data breach of “catastrophic” proportions in the next few years.

The combination of more and more devices connected to the internet, together with the increasing risk of cyberattacks, as well as the growing sophistication of the attacks we’re seeing, is allowing cyber-hackers the perfect platform to do some real damage.

On top of this, with organisations still not taking their cybersecurity responsibilities seriously enough, unless things change, we could be headed for disaster very soon.
read more

By Author

Trusted Quid data breach – some 66,000 payday loan customers hit by breach

We have already been contacted by people affected by the Trusted Quid data protection breach, and our Data Leak Lawyers have agreed to investigate cases.

As many as 66,000 customers of payday loan firm Trusted Cash, trading as Trusted Quid, may have had their data stolen due to an unauthorised access of their website. Customers affected by the breach are now at a greater risk of becoming a victim of fraud as key information was stolen in the breach.

Because of the nature of the data compromised in the cyberattack, this is a very serious data protection breach indeed.

read more

By Author

Councils ‘unprepared’ for cyber-attacks

According to information from a report by privacy advocates Big Brother Watch, despite assurances that local government authorities are taking data protection seriously, more than a quarter of UK councils have had systems breached in the last five years.

The report also found that the majority of the successful breaches were caused by the simple and well-known phishing method, pointing to staff as the “weakest link” in terms of cybersecurity and data defence.

The report also references the fact that three-quarters of councils reportedly do not provide mandatory cyber-security training, with 16% not providing any at all.
read more

By Author

Tesco Travel Money data protection breach advice

Back in 2016, the cybersecurity of Tesco Bank was rigorously questioned, when hackers were able to gain access to 9,000 customers’ accounts and steal £2,500,000.

Tesco also suffered a further breach last week were they reportedly cancelled a number of credit cards over a ‘third-party compromise’.

There has now been another breach where it’s estimated 17,000 Tesco Travel Money customers are subject to this new and massive data protection breach which happened through Travelex – a company that runs services on behalf of Tesco.

Names and payment information are amongst the data that has reportedly been compromised
read more

By Author

Leicester City Council accidentally send spreadsheet to taxi firms containing details of vulnerable adults and children

Leicester City Council accidentally sent an unsecured spreadsheet to 27 taxi firms that reportedly contained sensitive details of potentially thousands of vulnerable adults and children.

The error occurred as the local government authority were processing tenders for transport of people in care and people with special needs.

Although a recall email was sent, there is no telling just how far the data may have inadvertently spread.
read more

By Author

Gwent Police to be investigated over “hiding” data protection breach

Worryingly, the police occupy one of the top spots in terms of organisations at the centre of data breaches, data leaks and hacks. Victims whose data is compromised in a data protection breach deserve to be notified as soon as possible, but it’s not unheard of for an organisation to “hide” a data breach as opposed to facing up to it and dealing with it.

Reportedly, Gwent Police are to be investigated for doing just that.

News sources say that Gwent Police are being investigated for failing to inform hundreds of individuals that their data protection rights had been breached.
read more

By Author

NHS staff accessing neighbour’s medical records is NOT okay

There is a recent worrying trend of NHS staff being caught out snooping on people they know, or are related to, by abusing their powers to access their medical records.

Let’s be absolutely clear: it is NOT okay for any member of the NHS to access their neighbour’s medical records without good reason or due authorisation.

If you are informed that a member of the NHS staff has accessed your medical records in such a way, or if you discover it has happened, you may be entitled to claim for data protection breach compensation.
read more

By Author

Council data protection breaches are serious and highly sensitive

Data protection breaches committed by councils / local authorities – or the companies they outsource work to – can be unfortunately common. We advise and represent a large volume of people who have been the victim of a data breach caused by their local council, so we understand how bad they can be.

The serious council data protection breaches can cause a lot of problems for the victims, and given the nature of data that local authorities often hold – these type of breaches can be very sensitive indeed.
read more

By Author

Ex-soldier prosecuted for posting vulnerable adult’s sensitive data on Twitter

The Information Commissioner’s Office (ICO) has released the details of a prosecution and a police undertaking after private and sensitive information was intentionally leaked on social media platform Twitter.

William Godfrey from Kent had been in a relationship with a probation officer when he came into possession of a USB data stick containing sensitive data. He later tweeted some of the sensitive data on the USB device and threatened to release more data as well.

For their part, Surrey Police signed an undertaking to improve their data protection policies and procedures.
read more

By Author

Council worker fined after being caught sharing personal data on Snapchat

It’s not only NHS workers who are breaching data protection rules by accessing medical records when they shouldn’t be. There’s also a worrying trend of data being breached by the rogue actions of employees, and with data being so easily shared nowadays, we remain concerned.

With a huge amount of councils lacking proper mandatory data protection training, you could argue there are potentially thousands of employees out there who don’t know any better. This is not good enough, and these prosecutions should serve as stern warnings to both employers and employees about breaching data protection rights by illegally sharing data.
read more

By Author