Welcome To The Data Leak Lawyers Blog

USB device containing confidential Heathrow Airport data found miles away on a London residential street

Confidential and secretive information for Heathrow Airport was reportedly found on a USB device some 13 miles from the site in a random London neighbourhood, prompting questions over the quality of the U.K.’s airport security.

The data on the device was also found to have had no encryption and wasn’t even password-protected; arguably the most rudimentary security measure that should be implemented for any type of information worth protecting.

How confidential data concerning the U.K.’s largest airport – and potentially a huge target for terrorist attacks – could be removed in this manner is incredibly worrisome.
read more

By Author

Australian ‘Amazing Rentals’ uploads thousands of personal documents online

Australian appliance-rental company, Amazing Rentals, are in trouble with Australian authorities yet again for behaviour that has prompted government discussions over the need to crack down on bad business behaviour.

Around mid-September this year, the Guardian reported that Amazing Rentals “published 26,000 personal documents involving 4,000 customers on the internet.” No further information was provided as to what the details included, but clear concerns were aired over identity theft and credit fraud.

The Australian Information Commissioner’s Office shut down Amazing Rental’s website shortly thereafter and warned the retailer’s customers to take precautions against identity theft and other forms of fraud.
read more

By Author

All Wi-Fi networks reportedly vulnerable to hacking

Security experts warn that all Wi-Fi networks are vulnerable to hacking after a Belgian researcher managed to break through a protective security protocol implemented in most of the world’s routers.

Whilst unsurprising, given all the major hacks that have happened lately (Yahoo, Equifax, HBO), confirming it still makes us all feel a little uneasy.

The researcher, Mathy Vanhoef, was studying the WPA2 security protocol used in wireless networks when he came across the vulnerability, and the result means that all devices that have a Wi-Fi connection could be affected by the weakness.
read more

By Author

ICO publishes useful guides on the new GDPR

Head of policy and engagement at the Information Commissioner’s Office, Jo Pedder, points to useful guidance on the new EU General Data Protection Regulation that is set to come into force come May 2018.

The regulation will bring in some major changes as to how organisations are expected to look after personal data and the responsibilities in disclosing them to the authorities and affected individuals. The changes could mean huge punishments for organisations who fail to take their data protection responsibilities seriously.
read more

By Author

Dyfed-Powys Police Force signs undertaking after multiple data breaches reported

Dyfed-Powys Police Force in Wales signed an undertaking with the Information Commissioner’s Office (ICO) after a number of data breaches over an 18 month period were identified.

The ICO was alerted to the seriousness of multiple incidents that indicated a potential lack of data protection training and protocols. Although none of the breaches appear to have had any underlying malicious intent, the ICO recognised the seriousness of the repeated data breaches.
read more

By Author

Equifax hack compromised 15.2 million U.K. records

The gigantic Equifax data breach that saw 143 million U.S. customers have their sensitive credit information breached also affected 15.2 million U.K. records as well. There are thought to be some 700,000 U.K. victims of the breach who may have had their personal and sensitive information stolen.

Equifax has said they will reach out to victims by post to notify them of the data breach and offer free access to some form of data risk mitigation service.
read more

By Author

‘Reaper’ Botnet the latest threat to internet-connected devices

Warnings over a new hacking botnet called ‘Reaper‘ have been issued. It has been identified as the latest major cybersecurity risk to devices connected to the internet, and first emerged in October 2017.

Cybersecurity company Check Point reports that over a million internet connected devices have already been infected, and it doesn’t look like the botnet will be stopped anytime soon. They warn “our research suggests we are now experiencing the calm before an even more powerful storm. The next cyber hurricane is about to come.”
read more

By Author

Businesses need to communicate more about their data breaches; before and after they happen.

Data breaches can be very embarrassing for a business. Being attacked by hackers can undermine the control the business has over its own systems and databases, and it can hamper the loyalty of their customers.

The embarrassment can be even worse if the data breach occurred as a result of an employee error.

After a data breach, the trends we witness for an affected business vary depending on how a breach is handled… For businesses that try to conceal a breach and are found out via other channels the backlash can be brutal as share prices drop, customers leave to do business elsewhere and the reputation of the brand takes a battering in the media.
read more

By Author

Are British businesses sweeping data breaches under the carpet?

With the General Data Protection Regulations (GDPR) looming, it seems that British businesses may have a long way to go when it comes to straightening up to comply with the new European regulations.

They come in to force in May next year – the clock is ticking!

It appears that firms in Britain may reportedly have a culture of keeping data breaches a secret and not reporting them; perhaps for fear of repercussions or simply because they don’t know what to do. But such behaviour simply will not do…
read more

By Author

66% of small-to-medium businesses could “shut down” in the event of a data breach

Computer Antivirus provider Vipre recently conducted a study to see how small-to-medium businesses (SMB) would be impacted by a data breach.

The findings were startling – they indicated that, in the event of a data breach, up to two-thirds of these companies could either go out of business completely or have to shut down for at least one day.

Practically, this is very concerning.
read more

By Author