Welcome To The Data Leak Lawyers Blog

South African data breach compromises 30 million personal records

Creator and founder of HaveIBeenPwned.com, Troy Hunt, discovered yet another data dump last year. This one reportedly contained personal data belonging to millions in this staggering South African data breach.

At the time of discovery, the information was available from an online public database back-up file and even came with a smaller compressed version. Anyone on the site could download the information.
read more

By Author

Malaysia sees colossal data breach that may have affected entire population

Technology website Lowyat.net reportedly discovered a huge Malaysian data breach that saw millions of people have their personal data stolen and leaked on the dark web.

The information was apparently taken from multiple Malaysian mobile phone operators, as well as the Malaysian public sector and commercial company websites.

With over 46 million confirmed records breached, this is one monumental data incident.
read more

By Author

ICO issues True Telecom fine of £85,000.00 and an enforcement notice for nuisance calls

Based in Dartford, True Telecom Limited has been fined by the Information Commissioner’s Office (ICO) for illegally calling people to advertise their services.

The Telephone Preference Service (TPS) reported a number of complaints from individuals who received calls from True Telecom despite being signed up to TPS to specifically let organisations know not to contact them for direct marketing purposes. Organisations who call people to advertise their products and services must first receive consent before they do so.
read more

By Author

Cloud storage error compromises almost 50,000 records belonging to government and major company employees

Australia was recently hit by a huge data breach when a misconfiguration of a cloud storage system reportedly compromised some 50,000 employee records.

This is thought to be the second largest data breach in Australian history.

A number of employee records were compromised for several government departments, including 3,000 from the Department of Finance; 1,470 from the Australian Electoral Commission; and 300 from the National Disability Insurance Agency.
read more

By Author

The Swedish data breach attack and fraud trial

Swedish prosecutors initiated a huge trial after a number of private and public organisations were hacked. Eight people are reportedly standing on trial for the criminal charges that saw at least 40 million Swedish kronor (£3.6 million) stolen or mishandled.

If convicted, the alleged perpetrators could face eight years in jail for their criminal conduct. The exact number of victims has not been confirmed.

The criminal hacker group reportedly hijacked computers and set up social engineering attacks to steal money from a number of organisations and individuals. The Swedish Prison and Probation Service was hit by a breach, along with 20 companies, four banks, a number of law firms, and private individuals also.
read more

By Author

Whole Foods Market hacked, reportedly compromising customer credit card data

Supermarket chain Whole Foods Market Inc has admitted that the company suffered a major data breach through its payment card systems.

In an announcement, they revealed the breach happened through their ‘taprooms’ and full table-service restaurants inside some 40% of their stores, rather than through its checkout services.

This is significant as the company uses a separate payment system for its bars and restaurant to its grocery checkout stations, with most of their customers using the latter. Any breach involving card and banking information is, of course, incredibly serious.
read more

By Author

Lessons learned: the university that came under fire for leaking sensitive and confidential data on its students

The University of East Anglia (UEA) was met with anger and disappointment from students and the general public when it was revealed that a member of staff made a horrific error when they sent out a spreadsheet listing named students’ extenuating circumstances. The spreadsheet identified some 40 students by name and student ID numbers, and had their private and confidential information right next to their names.

The spreadsheet showed which students were entitled to things like longer deadlines as their extenuating circumstances included personal matters such as family illnesses and bereavements; mental health problems, including depression; and even sexual assaults.
read more

By Author

Deloitte belittles data breach for affecting “very few” clients

Corporate finance firm Deloitte disclosed a data breach that compromised its internal emailing system, but apparently the breach only affected a “very few” clients.

Those “very few” clients may be not-so impressed with, what appears to be, the company’s attempts to shrug the data breach off as less-than serious just because a small minority of clients were affected.

The company ironically recently rolled out its Cyber Risk Services and even received applause for its growth in cyber intelligence. This kind of breach for a firm of this nature – much like the Equifax breach – is incredibly worrying.
read more

By Author

Governments demanding answers from Uber over recent data breach

Car-sharing company, Uber Technologies, are facing further questioning from governments as they demand answers over alleged violations of multiple laws and regulations stemming from the 2016 Uber data breach that saw a reported 57 million customers and drivers have their personal information exposed.

The failure to disclose the breach is not being accepted by some regulators and lawmakers. A number of lawsuits have been launched against the popular company with allegations of consumer fraud and deceptive business practices.
read more

By Author

U.K. consumer group sues Google for reportedly violating iPhone users’ privacy

Google is being sued for allegedly violating five million iPhone users’ data protection and privacy rights by collecting personal data without authorisation in 2011 and 2012.

The adeptly named group, Google You Owe Us, believes that Google owes each of the five million consumers hundreds of pounds.

The organisation alleges that Alphabet Inc, the conglomerate parent company of Google, unlawfully collected iPhone users’ personal information by bypassing  smartphones default privacy settings.
read more

By Author