Welcome To The Data Leak Lawyers Blog

School data breach compensation claims

School data breach compensation claims can often be serious and incredibly sensitive as the victim of the data breach will usually be a minor. A minor can still claim for data breach compensation with an appropriate adult as their “Litigation Friend”, which is normally a parent or guardian.

School data is of course very private and can be very sensitive. Schools must be privy to a wealth of personal and sensitive data about children, including their domestic circumstances and medical details. A school data breach or data leak could involve thousands if it covers a particular Local Education Authority area, so this type of data must be kept safe and secure.
read more

By Author

Scams and fraud from data breaches and data leaks

Scams and fraud from data breaches and data leaks are common. In fact, scams and fraud are common anyway, with more than 10,000 cases reported last year, which was a five percent rise on the previous year.

It can be so easy for people to fall victim to scams and fraud that stem from data breaches, so the big question is how people can protect themselves, and what the organisations who hold our money – and data – can do to protect us as well. The burden of responsibility is a two-way street, and there is plenty that banks and organisations can do to better protect us.
read more

By Author

Is an organisation responsible for an employee data breach?

“Is an organisation responsible for an employee data breach?”

This question is rarely asked when people contact us for help and advice about a data protection compensation claim, but it can be a key one. Many people often assume that the organisation – i.e. the person’s employer – must be responsible; but that’s not always the case.

Data breach incidents are assessed on a case-by-case basis, but there can be scenarios where an employee’s data breach can leave the employer vicariously liable, meaning the organisation they work for is who you pursue. In fact, a recent landmark case has potentially made it easier to do this as well.
read more

By Author

Are victims of the Equifax data breach being looked after properly?

Are victims of the Equifax data breach being looked after properly? Some data suggests they’re not, and with an estimated 700,000 UK victims of the breach, Equifax must do as much as they can to ensure they look after the victims.

We are representing a large group of individuals who were affected by the breach, so if you are looking for advice about making a claim, we can help.

With personal and sensitive data compromised in a data breach, it’s imperative that victims are properly looked after by the organisation responsible for the breach. Are Equifax doing enough in this case?
read more

By Author

Last year’s WannaCry attack was a lucky escape for the NHS

Last year’s WannaCry attack was a lucky escape, and the government is quite rightfully being urged to learn lessons from the encounter. We are almost a year on from the day that saw around one-third of all NHS Trusts in England disrupted by the malware attack that specifically targeted older (and therefore weaker) systems and servers.

The attack saw hundreds of other NHS organisations – including almost 600 GPs – infected during the attack, and some 20,000 hospital appointments and operations were cancelled.

Ultimately, the WannaCry attack was simple malware that still managed to cripple the NHS. It was a lucky escape, and future attacks involving medical data could be far, far worse.
read more

By Author

YouTube accused of illegally collecting children’s data

YouTube has been accused of illegally collecting children’s data by Consumer Rights groups who have filed a legal complaint against them.

The Google-owned video and music platform is supposed to be for persons aged 13 and older, yet studies indicate that it’s most popular with children aged between 8 and 12.

According to the concerns raised and the complaints filed, YouTube is illegally collecting the data without parental consent, and they know that they’re doing it; raising fear that they’re in breach of data protection legislation.
read more

By Author

Uber data breach was a lesson in how NOT to handle a cyberattack

The Uber data breach was a clear lesson in how NOT to handle a cyberattack. When the hackers contacted Uber by email, back in November 2016, they demanded a six-figure sum in order to destroy the wealth of data they’d stolen so news of the breach would quietly fade away once the bribe had been paid.

As opposed to dealing with the data breach in the appropriate way, Uber decided to pay-off the hackers and cover the breach up. A payment of $100,000 was reportedly made to the two hackers, and employees responsible for the security issue passed the whole thing off as a “bug bounty” program, which is where hackers are offered money to try and find weaknesses.

In reality, they were simply hacked, and Uber have not only paid the heavy price of the bribe, but also the cost of a handling the crisis thereafter.
read more

By Author

Kensington and Chelsea council fined £120,000 for indeliberate data breach

The Royal Borough of Kensington and Chelsea council has been fined £120,000 for an indeliberate data breach because the personal details of empty property owners in their constituency was published, contrary to data protection laws.

The Information Commissioner’s Office (ICO) has called it a “serious contravention” which has led to the huge fine being issued of £120,000.

According to the ICO reports, a Freedom of Information (FOI) request had been made in relation to the Grenfell Tower incident as part of research into social inequality, and it was this request that led to the accidental disclosure.
read more

By Author

A data breach at the University of Surrey Sports Park hits 90,000 staff and students

A data breach at the University of Surrey Sports Park has hit 90,000 people after a password was published online by a software supplier in what is being classed as an “employee error”.

The University has reportedly contacted members, staff and students to inform them of the data security issue, where details like birth dates, bank details, health information and contact particulars was at risk of exposure due to the publication of the password. A “sincere apology” has been issued, and victims of the breach are being asked to remain vigilant.
read more

By Author

TalkTalk accused of continuing to neglect cybersecurity

Telecoms giant TalkTalk have been accused of continuing to neglect cybersecurity after a hacker contacted Sky news and reported website security flaws that had been left unfixed for years.

The news comes as little surprise to us as we continue to represent victims for previous TalkTalk cyber-hacks that were, in our view, entirely preventable.

According to the media reports from the end of March, the hacker found a simple scripting error that allowed him to take control of a TalkTalk.co.uk URL, and use it to trick customers that they were visiting a genuine TalkTalk website.
read more

By Author