We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.
Although the industry has, unfortunately, had quiet year in 2020, it seems this fact has not lessened their risk of travel and leisure data breaches.
Travel and leisure breaches have been prominent in the news with the revelation that companies including Expedia and Booking.com have been affected by a large-scale breach, after their partner Prestige Software failed to password-protect a database containing millions of customers’ booking details. Among the exposed details were guests’ names, phone numbers, email addresses and payment details, inducing risks of both blackmail and fraud.
As the travel and leisure industries continue to be a prime target of hackers, it is important to evaluate the scale of the impact, and to consider why these companies succumb to breaches again and again.
In today’s digital world, we often expect data breaches to occur in cyber settings. However, the risk of data leaks, loss and theft involving physical records and documents is also a cause for concern, and companies still need to be vigilant in protecting their hard material information.
Incidents involving physical records can happen a lot. The all too frequent neglect of physical records is exemplified in the case of Westbury House, a Hampshire care home that closed in 2016 after being deemed an unfit care provider.
It was reportedly found to have abandoned confidential staff and patient information in the uninhabited building. The information was only proved to have been removed and secured at the start of December, 4 years after the care home’s closure. Over the course of these years, obvious negligence could have allowed trespassers to breach the building and rifle through the files. A failure of data protection such as this cannot go unnoticed.
A recent leak of patient data has called into question the data protection practices of Lloyds Pharmacy. A parcel containing the prescription records of hundreds of Lloyds pharmacy patients is believed to have been intended for an NHS recipient, but mistakenly reached a personal home 300 miles away instead.
When the unintended recipient opened the box, she was shocked at the mass of details she found, assuming they were intended for the NHS prescription services in Bolton.
While Lloyds Pharmacy has placed the blame on an external courier service who mistakenly delivered the parcel, they may not be able to sidestep their ultimate responsibility for the control and handling of their own data in accordance with the GDPR. The incident undoubtedly highlights the risks organisations take when entrusting an external party with the safety of confidential records.
In a workplace data breach, the exposure of employee information can be devastating for the reputation of the company and its overall operations.
But the personal impact on staff members can be the most harmful effect, and this is the element that we focus on.
If you have been the victim of a data breach in your workplace, Your Lawyers is here to support you in the face of the errors or neglect of your employer. In the event that your information has been processed incorrectly or insufficiently protected, you could be eligible to claim compensation for any harm caused to you.
A recent meeting of local councillors has reportedly highlighted data security problems that could put the Lichfield District Council in breach of the General Data Protection Regulation (GDPR).
The issue surrounds the reported continued use of unencrypted laptops and was raised by Cllr Joanne Grange, who is understood to have expressed concerns that the problems had still not been addressed three years after they were identified in 2017.
It is understood that Cllr Grange suggested that the failure to update working practices in accordance with data protection regulations could be tantamount to “negligence”. Her statements have undoubtedly highlighted some key problems which the council should feel obliged to address as a matter of urgency.
In the case of the recent Transform Hospital Group data breach, the large cosmetic surgery chain has been targeted by hackers who seem to be aiming to extort money from the company.
The group has not yet given a number for how many customers have been affected, but the data exposed is reported to be extensive. The inclusion of ‘before and after’ surgery photos has been a cause of particular concern among the victims, who fear they may be published on the internet.
For anyone involved in a data leak, the impact of having your information exposed can be devastating. In some of the worst of cases, the privacy of the information exposed can make the aftermath a deeply upsetting time. We have already taken on clients who have been affected by the Transform Hospital Group data breach, so do not hesitate to contact us if you would like advice regarding your potential compensation claim.
A medical data breach is often serious as our medical data often represents the most personal information that we will ever entrust to a third party.
The faith we invest in medical professionals to protect this data is indicative of our confidence in their ability to care, and in the health service more generally.
However, this trust is at risk of being eroded due to the succession of medical data breaches that we have encountered, either first-hand or in the headlines, in recent years. When such breaches occur, the exposed information can be highly sensitive and, depending on the affected individual’s circumstances, can dramatically affect their mental state and/or their relationships. It is vital that the confidential doctor-patient relationship at the heart of the NHS is not damaged by a failure to prevent these exposures.
A recent data leak from a community organisation has reportedly exposed the personal information of highly vulnerable domestic violence victim.
Moving On is a Rochdale-based support service that seeks to help adults with acquired disabilities and provide a safe space for them to work through their difficulties. However, a series of errors reportedly led to the personal data of a former domestic violence victim being sent to a third party and posted online.
The victims in question is understood to have been left ‘terrified’ following the incident, worrying who their personal information may have reached. Rochdale council is investigating the leak to find the cause of the error, but it has already been established that council officials were apparently responsible for sending a letter that unintentionally shared the victim’s details with a third party.
As pressure mounts on the airline, a British Airways data breach settlement is on the cards as the legal representatives of BA alert the court of their intentions to engage in negotiations.
The breaking news of this development comes from leading consumer action and data breach firm Your Lawyers, with wide coverage so far with major media outlets including The Sun and The Mirror. Your Lawyers, who sit on the Steering Committee responsible for the overall conduct of the litigation, declare that this is a massive step forward. This could signal the start of the end of the action that is now entering its third year, and it could represent an incredibly significant compensation pay-out bill that could reach up to £2.4 billion to be shared between over 400,000 victims if all initiate a claim.
The announcement signifies what we always believed should have been on the horizon. A settlement could effectively draw a line under the serious 2018 data breach that shocked the world. We urge victims who have yet to claim to come forward to start their case before the deadline to claim expires soon.
The Stone Refurb data breach involves the Staffordshire-based IT company formally known as Encore PC.
They suffered a data breach in 2020 after reportedly being targeted by a cyberattack. Staffordshire police are understood to be investigating the cyberattack and they have urged anyone with information to contact them.
If you have been affected by a data breach where your personal details have been exposed, you could be eligible to make a claim for compensation with us today. We are a leading firm of data breach lawyers with years of experience representing victims for data breach claims. To talk to our team of experts today, see our contact page here for more information.
EasyJet admits data of nine million hacked
British Airways data breach: How to claim up to £6,000 compensation
Are you owed £5,000 for the Virgin Media data breach?
Virgin Media faces £4.5 BILLION in compensation payouts
BA customers given final deadline to claim compensation for data breach
Shoppers slam Morrisons after loyalty points stolen
Half a million customers can sue BA over huge data breach
Lawyers accuse BA of 'swerving responsibility' for data breach
The biggest data breaches of 2020
Fill out our quick call back form below and we'll contact you when you're ready to talk to us.