Welcome To The Data Leak Lawyers Blog

The 2016 Tesco bank hack – when banks are breached

It’s a rare thing for a bank to suffer a data breach, but around this time last year people were left fearful after Tesco suffered a massive security breach in their banking branch.

Reportedly, around 40,000 Tesco Bank accounts were affected with money taken from some 20,000 accounts.

At least £2.5 million was stolen in what was deemed as one of the biggest, successful attacks on a bank to have ever occurred, and potentially the very first, large-scale attack where money was directly stolen from a bank.
read more

By Author

A look back at the 2015 TalkTalk hack

We are now two years on from the TalkTalk hacking scandal, and we are helping a number of individuals claim compensation as victims of the breach. In October 2015, TalkTalk was yet again subject to another data breach by hackers when around 157,000 customers had their personal information reportedly accessed. The hack exposed some customers’ names, addresses, dates of birth, phone numbers and email addresses. For around 10% of the victims, this also reportedly included bank details, raising fears that accounts could have been accessed.

Hackers used software to illegally access information and then appeared to upload the company’s weaknesses on the internet. It is thought that none of the personal information accessed was encrypted.
read more

By Author

Hundreds of popular websites leaking personal data claim experts

Data security studies have revealed that there are literally hundreds of popular websites and mobile applications leaking personal information. Previous studies suggested even the Royal Mail is one such business leaking data, which goes to show the extent of the problem.

Many of the websites and apps researchers say are guilty of leaking data have an international reach, meaning people from all over the world could be victims to these data leaks. Studies so far have been focused on personally identifiable information (PII), which is data that can be directly linked to the owner.

This is worrying.
read more

By Author

When Europol suffered a data breach

A law enforcement agency suffering a data breach is a worrying thought, especially one as big as Europol – but it can and did happen.

Last year, Europol admitted they were subject to a rather shocking data leak when one of their former employees – a former Dutch police officer – breached the agency’s policies by taking home a confidential file that contained extremely sensitive information on multiple terrorist investigations.

A story from 2016 that’s similar to the recent Heathrow USB device found containing all sorts of sensitive security information, it goes to show the worrying reality that even the forces who are there to protect us can fall foul of a data breach.
read more

By Author

Uber “paid off” hackers to keep quiet on a data breach involving 57 million users

Uber has revealed that the company’s database was hacked in October last year, but instead of alerting authorities and warning users about the breach, they instead paid hackers around £75,000 to keep quiet about the hack, and for assurances that the information would be deleted.

Former chief security officer, Joe Sullivan, reportedly made the decision to cover-up the Uber hack, and it was a decision that cost him his job, his deputy’s job, and risked the security of some 56 million people around the world.
read more

By Author

Former Yahoo CEO and Equifax CEO’s testify for largest data breaches in history

The former Yahoo CEO and Equifax CEO were grilled over perceived failings surrounding two of the world’s largest data breaches in history.

Hackers easily got through both companies’ security systems and stole personal data belonging to millions of people. For two large organisations like Yahoo and Equifax, you’d think such breaches would never happen at all…

Both former company representatives reportedly started out by saying how they’d “changed” since the breaches, but they apparently also struggled when facing intense questioning.
read more

By Author

Freedom of press vs data protection – the big debate

As we prepare ourselves for the General Data Protection Regulation, an updated version of the Data Protection Bill is making its way through Parliament. The bill will hopefully give people more control over their personal data and greater enforcement powers when organisations don’t keep it safe or misuse it.

In addition to this, the House of Lords changed the way reporters can obtain and use personal information in the name of public interest. This means individuals can make a claim for their private information not to be disclosed before it’s already plastered on the headlines.

Some news outlets are not happy about it!
read more

By Author

Equifax data hack: the damage has only just begun…

“On a scale of 1 to 10 in terms of risks to consumers, this is a 10” – says fraud analyst, Avivah Litan on the Equifax data hack.

It has been months since the Equifax hack, but calamity isn’t about to quieten down anytime soon as the hacking exposed confidential information belonging to some 145 million customers, including almost 700,000 in the U.K.

This particular breach is distinct to others because of the wealth of information stolen combined with the company’s somewhat questionable attempts to mitigate the damage…
read more

By Author

After compromising over 145 million people’s financial data records, Equifax responds by producing an app…

Equifax have faced heavy criticism for a series of failings around the data breach that exposed over 145 million people’s personal data records, with almost 700,000 Brits caught up in the scandal. It was bad enough that a company responsible for credit referencing was easily hacked, especially given that the hack was down to Equifax failing to patch a known security vulnerability.

Their handling of the breach has been heavily criticised by authorities, experts and regulators. There are allegations of delays and failures to report the breach; an arguably dangerous website set up for people to check whether they were affected (which fraudsters can copy to lure people to give away information); and now an app, which is arguably one of worst offenders in terms of breaches and leaks of information.
read more

By Author

Nursing and Midwifery Council dismisses NHS midwife for snooping on medical records

A ‘nosy’ midwife has been sacked by the University Hospitals of Coventry and Warwickshire NHS Trust after she was discovered to have viewed confidential medical records belonging to friends, colleagues and other acquaintances.

Thirty-eight-year-old Vicky Anne Bloxham lost her job as a midwife for the illegal snooping carried out between 2002 and 2016.

In 2016 alone, Bloxham reportedly reviewed the medical records of some 45 friends and acquaintances without authorisation, with one person’s records accessed 13 times in a four-month period.
read more

By Author