Welcome To The Data Leak Lawyers Blog

We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.

Category: ICO

compensation advice for hospital data breaches
March 01, 2019

U-turn in Worcester GP data breach case

NHS England has ruled in an investigation into a Worcester GP data breach after previous findings suggested that the law had not been broken.

In this unusual case, the Severn Valley Medical Practice reportedly posted information online about a patient. Initially, the Practice is understood to have disputed that any data protection breach had occurred. Since then, NHS England and the Information Commissioner’s Office (ICO) both agree that the incident was a failure to comply with data protection obligations.

Another element that makes this case unusual is about allegations made surrounding the Data Protection Officer (DPO) who reportedly claimed there wasn’t a breach in the first place.

read more

By Author
user credentials
February 21, 2019

Deliveroo data breach incident reported to ICO

A Deliveroo data breach “incident” is said to have been reported to the ICO who have confirmed that they’re making inquiries.

Back in 2016, the food delivery company faced scrutiny after customers complained of fraudulent transactions on their accounts. In some cases, it appeared the issues were down to people’s credentials being stolen in hacks completely separate to Deliveroo. Criminals had used stolen credentials to access accounts in cases where credentials were reused.

Deliveroo were subsequently criticised over what some customers felt was a failure to spot and stop fraudulent transactions. In this latest incident, it appears that history may be repeating itself.

read more

By Author
uber data breach
December 13, 2018

Fine issued for Uber cyber attack

A hefty fine has been issued over the 2016 Uber cyber attack as a result of security flaws that could have prevented the breach in the first place.

The data for some 2.7m Uber customers in the UK was compromised, as were the records for over 80,000 drivers. The fine, issued by the ICO (Information Commissioner’s Office), is small in comparison to potential GDPR fines. This is because the cyber attack took place in 2016 before the new rules came into force.

Had the cyber attack have happened this year, Uber could have faced fines in the millions.

read more

By Author
Dyfed-Powys Police enforcement notice
December 04, 2018

Staffordshire police data breach leads to sacking

A sickening Staffordshire police data breach has led to an officer being sacked and being handed a 12-month prison sentence.

With the police handling very sensitive and personal information, we expect the best from them. Unfortunately, they do fall short on some occasions. The police have been embroiled in a number of data breach incidents for several years. A concerning element is where officers are using police data when they’re not supposed to.

This hearings in the Staffordshire police data breach at the centre of this article resulted in the instant dismissal for the officer involved.

read more

By Author
claim for an accidental data
November 20, 2018

Lancashire County Council data protection concerns

Concerns have been raised over the quality of Lancashire County Council data protection measures after a spate of breaches occurred in a period of a few months.

Council data breach claims are common. Our Data Leak Lawyers represent a lot of victims claiming for council data protection issues because of how often these incidents can occur.

According to recent figures, Lancashire County Council data protection measures are in need of improvement. This has come after a significant number of breaches occurred over a three-month period, of which some were referred to the ICO (Information Commissioner’s office).

read more

By Author
uk businesses data breach
November 09, 2018

Clare Lawson prosecuted by ICO for data breaches

Former nurse at Southport and Ormskirk Hospital NHS Trust, Clare Lawson, joins the long list of prosecuted NHS staff caught snooping on medical records.

We’ve ran so many stories about the prosecutions and penalties enforced by the ICO (Information Commissioner’s Office) for snooping. The NHS hold a vast wealth of medical data about us, and it’s all private and often very sensitive. We put our faith in the NHS and their staff to look after our confidential information and not abuse their access to it.

This is yet another prosecution for the improper access of medical records. These kinds of medical data breaches are common for us to represent people for.

read more

By Author
how much the average compensation
October 05, 2018

Advice about the Equifax ICO fine and compensation

The Equifax ICO fine was welcome news, although victims may need clarity on their rights for compensation as well as understanding the fine itself.

The Equifax ICO fine was the maximum allowed under the rules that came before the GDPR. Had the incident have occurred in the post-GDPR era, Equifax could have faced fines amounting to millions.

The fine itself is separate to any compensation claim a victim is entitled to make. We launched our legal action last year and it’s not too late to join if you’ve yet to sign-up. Read on for more information about how the fine was issued as well as victims’ rights to compensation.

read more

By Author
equifax data breach
September 21, 2018

Equifax data breach fine: maximum penalty issued

The Equifax data breach fine from the ICO is the maximum amount that can be issued under the pre-GDPR rules. We welcome the decision.

Last year, we initiated our legal action against Equifax for victims of their mega breach. We’re now representing a number of individuals affected by the breach. If you have yet to join our Claimant Group, please contact us as soon as you can. It’s not too late.

The fine issued by the ICO (Information Commissioner’s Office) is the maximum allowed under the former rules before GDPR came into force. However, the fine does not account for the compensation that we’re pursuing for people.

read more

By Author
council email data leaks
September 03, 2018

ICO issues fine for IICSA data breach

The ICO has issued a fine for the IICSA data breach that took place last year. The fine amounts to £200,000.00 given the sensitive nature of the data involved in the breach.

The ICO (Information Commissioner’s Office) said last month that, “This incident placed vulnerable people at risk, which is concerning. IICSA should and could have done more to ensure this did not happen.”

The IICSA data breach was another scenario of a simple but very avoidable data breach that has ultimately led to incredibly sensitive and personal information being exposed.

read more

By Author
us and eu data breach laws
August 16, 2018

Equifax cyber hack fine avoided in the US

An Equifax cyber hack fine has been avoided in the US as the company struck a deal with regulators to change their ways and avoid a repeat of the incident.

The massive Equifax data breach that took place in 2017 was entirely preventable given it was caused by their failure to patch a known security vulnerability, and the fact that their own systems failed to identify the continuing vulnerability. As such, the avoidance of an Equifax cyber hack fine in the US has come as somewhat of a surprise, but this doesn’t mean that they won’t be fined here in the UK.

We’re acting for a group of victims of the Equifax breach here in the UK who are claiming compensation as a result of the incident.

read more

By Author

We offer genuine No Win, No Fee agreements for our clients. Why we do this is simple:

Leading Data Breach Lawyers
Our experience speaks for itself.
We will fight for your right to compensation.
Access to Justice
As a victim of a data breach or hack, you deserve your chance to get access to justice.
Risks Assessment
We carefully risk assess your case and take it on if we think we have a good chance of winning the claim.

Request A Callback From Our Team

Fill out our quick call back form below and we'll contact you when you're ready to talk to us.

Your privacy is extremely important to us. Information on how we handle your data is in our Privacy Policy

solicitors regulation authority

SRA
Contact
www.dataleaklawyers.co.uk is © of Your Lawyers Limited - we are 'Authorised and Regulated by the Solicitors Regulation Authority (SRA number 508768)'
arrow-up icon