We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.
Although the industry has, unfortunately, had quiet year in 2020, it seems this fact has not lessened their risk of travel and leisure data breaches.
Travel and leisure breaches have been prominent in the news with the revelation that companies including Expedia and Booking.com have been affected by a large-scale breach, after their partner Prestige Software failed to password-protect a database containing millions of customers’ booking details. Among the exposed details were guests’ names, phone numbers, email addresses and payment details, inducing risks of both blackmail and fraud.
As the travel and leisure industries continue to be a prime target of hackers, it is important to evaluate the scale of the impact, and to consider why these companies succumb to breaches again and again.
In today’s digital world, we often expect data breaches to occur in cyber settings. However, the risk of data leaks, loss and theft involving physical records and documents is also a cause for concern, and companies still need to be vigilant in protecting their hard material information.
Incidents involving physical records can happen a lot. The all too frequent neglect of physical records is exemplified in the case of Westbury House, a Hampshire care home that closed in 2016 after being deemed an unfit care provider.
It was reportedly found to have abandoned confidential staff and patient information in the uninhabited building. The information was only proved to have been removed and secured at the start of December, 4 years after the care home’s closure. Over the course of these years, obvious negligence could have allowed trespassers to breach the building and rifle through the files. A failure of data protection such as this cannot go unnoticed.
An employee error has recently brought about the Now: Pensions data breach, leading to the online exposure of customers’ personal details.
Now: Pensions, one of the UK’s largest pension providers, was involved in a breach of data protection duties through this leak. The result of the incident left the names, dates of birth, home addresses, and National Insurance numbers of trusting customers vulnerable to misuse.
The firm has accounted for the breach by explaining that a contractor from an external partner inadvertently uploaded the data to a public forum. Although the data was only public for a brief period of time and was removed as soon as the error was identified, the idea that the company’s procedures and systems could not protect against such a mistake is worrying.
In a workplace data breach, the exposure of employee information can be devastating for the reputation of the company and its overall operations.
But the personal impact on staff members can be the most harmful effect, and this is the element that we focus on.
If you have been the victim of a data breach in your workplace, Your Lawyers is here to support you in the face of the errors or neglect of your employer. In the event that your information has been processed incorrectly or insufficiently protected, you could be eligible to claim compensation for any harm caused to you.
In the UK last year, the coronavirus pandemic caused us to lead more and more of both our personal and professional lives online. As such, the risk of fraud from data breaches has heightened.
In 2020, The Daily Express reported that one in five people (equating to around 11 million) had their data hacked, and one in three reported that they are unequipped to protect their online data. This is a shocking number of victims which, in our view, is indicative of a national crisis in cybercrime. It undoubtedly reveals that large-scale action needs to be taken.
Indeed, the shocking nature of such statistics is part of the problem, as experts (ourselves included) cite low awareness as a key reason why the number of victims has been allowed to reach this horrifying height. The vice-president of Clario, the body which compiled the research in association with thinktank Demos, highlighted that victims seem to “think they should suffer in silence”.
According to recent media reports, a large number of psychotherapy patients, who belong to the same large clinic in Finland, found themselves on the receiving end of blackmail from a data breach.
Vastaamo, a countrywide practice, appears to have been targeted in two separate breaches, one potentially occurring in March 2019, and an initial attack as far back as November 2018. It appears that victims’ personal data was stolen from the company’s data storage system.
Although this is not a case we can represent people for, with it not being in England or Wales, it is an important one to consider. Ultimately, the risks – as we often advise – when it comes to this kind of data breach can be severe.
A recent meeting of local councillors has reportedly highlighted data security problems that could put the Lichfield District Council in breach of the General Data Protection Regulation (GDPR).
The issue surrounds the reported continued use of unencrypted laptops and was raised by Cllr Joanne Grange, who is understood to have expressed concerns that the problems had still not been addressed three years after they were identified in 2017.
It is understood that Cllr Grange suggested that the failure to update working practices in accordance with data protection regulations could be tantamount to “negligence”. Her statements have undoubtedly highlighted some key problems which the council should feel obliged to address as a matter of urgency.
In the case of the recent Transform Hospital Group data breach, the large cosmetic surgery chain has been targeted by hackers who seem to be aiming to extort money from the company.
The group has not yet given a number for how many customers have been affected, but the data exposed is reported to be extensive. The inclusion of ‘before and after’ surgery photos has been a cause of particular concern among the victims, who fear they may be published on the internet.
For anyone involved in a data leak, the impact of having your information exposed can be devastating. In some of the worst of cases, the privacy of the information exposed can make the aftermath a deeply upsetting time. We have already taken on clients who have been affected by the Transform Hospital Group data breach, so do not hesitate to contact us if you would like advice regarding your potential compensation claim.
With the festive season now over, a recent survey reported that two-thirds of shoppers were worried about holiday data breaches that may have ensued as huge numbers of customers flocked to online stores to make their Christmas purchases.
It seems that the coronavirus pandemic has prompted consumers to shop via online stores in their droves; even those who have previously avoided online shopping due to cybersecurity fears have had to turn to retail websites, despite their concerns about entering their credit card details to make an online payment.
While shopping trends have been evolving for several years, and many high street stores are gradually declining, the coronavirus pandemic has undoubtedly increased the growth of online shopping. It is, therefore, unsurprising that fears of online data breaches have heightened as Christmas approaches.
As pressure mounts on the airline, a British Airways data breach settlement is on the cards as the legal representatives of BA alert the court of their intentions to engage in negotiations.
The breaking news of this development comes from leading consumer action and data breach firm Your Lawyers, with wide coverage so far with major media outlets including The Sun and The Mirror. Your Lawyers, who sit on the Steering Committee responsible for the overall conduct of the litigation, declare that this is a massive step forward. This could signal the start of the end of the action that is now entering its third year, and it could represent an incredibly significant compensation pay-out bill that could reach up to £2.4 billion to be shared between over 400,000 victims if all initiate a claim.
The announcement signifies what we always believed should have been on the horizon. A settlement could effectively draw a line under the serious 2018 data breach that shocked the world. We urge victims who have yet to claim to come forward to start their case before the deadline to claim expires soon.
EasyJet admits data of nine million hacked
British Airways data breach: How to claim up to £6,000 compensation
Are you owed £5,000 for the Virgin Media data breach?
Virgin Media faces £4.5 BILLION in compensation payouts
BA customers given final deadline to claim compensation for data breach
Shoppers slam Morrisons after loyalty points stolen
Half a million customers can sue BA over huge data breach
Lawyers accuse BA of 'swerving responsibility' for data breach
The biggest data breaches of 2020
Fill out our quick call back form below and we'll contact you when you're ready to talk to us.