Welcome To The Data Leak Lawyers Blog

Yet another NHS worker fined for accessing sensitive medical records without authorisation

It seems the NHS can’t keep its staff under control as yet another worker has been found guilty of accessing sensitive medical records without authorisation.

Linda Reeves reportedly abused her position as a former data coordinator with access to the Trust’s patient database by rifling through medical records belonging to colleagues, friends and neighbours. She did not have any consent or authorisation from patients or her employer as the data controller.

Reeves has since resigned from her job at The University Hospitals of North Midlands NHS Trust.
read more

By Author

Nottinghamshire County Council fined £70,000 for leaving data belonging to vulnerable people exposed for 5 years

The Information Commissioner’s Office (ICO) issued Nottinghamshire County Council a fine of £70,000.00 for leaving sensitive personal data exposed online for half a decade.

The watchdog discovered the council’s ‘Home Care Allocation System’ (HCAS) was shared with care home providers using a simple link that did not require a username or a password.

The system contained a lot of personal information belonging to prospective and current care home users. Created in July 2011, the council was finally alerted to the security risk when a member of the public searched for HCAS online in June 2016 and found files readily accessible and completely unrestricted.
read more

By Author

Leicester city council worker fined for stealing sensitive personal data to use for his own business

Nilesh Morar worked for Leicester City Council in the Adult Social Care Department where he reportedly stole a wealth of personal sensitive data for personal financial gain.

He reportedly took the information belonging to vulnerable people without the Council’s knowledge or permission.

After he stole the personal data, Morar left his job with the Council to set up his own business, so the motives for stealing the data seem quite apparent.
read more

By Author

London Borough of Islington fined £79,000 for security flaw that may have compromised personal data belonging to 89,000 people

The Information Commissioner’s Office (ICO) has found that the London Borough of Islington is liable for breaching data protection duties through their reported failure to keep 89,000 people’s personal data safe on an online parking ticketing database.

Information including sensitive health details, disabilities and financial details were reportedly not properly secured.

Islington Council uses a ‘Ticket Viewer’ system to allow members of the public to review CCTV images or videos of the parking offence so they may check any tickets issued, and it is this system that is at the centre of the breach.
read more

By Author

Every single Yahoo account has been hacked – that’s three billion accounts!

2016 revealed one of the biggest data hacks in history when a reported one billion Yahoo user accounts were found to have been hacked, with login information stolen.

As if that wasn’t bad enough, it has now been revealed that the epic data breach affected all Yahoo users; tripling the initial number of accounts thought to be affected.

The three billion accounts breached is a number equivalent to almost half of the world’s entire population. Accounts for Yahoo-acquired social media platforms Tumblr, Fantasy and Flickr have also reportedly been compromised in the breach.
read more

By Author

Equifax CEO resigned just before testifying over colossal data breach

Former Equifax CEO Richard Smith’s retirement, just days before he was scheduled to testify over the huge data breach at court, has generated a lot of criticism. Although his resignation can be deemed as a positive reaction to the breach that reportedly exposed the details of some 143 million individuals, prosecutors are condemning it as not enough to make up for the “travesty”.

It’s thought that some 209,000 credit card numbers were compromised in the breach, with some belonging to U.K. customers. Reports suggest that Smith will be “keeping $18 million in pension benefits and possibly $30 million in stock options.”
read more

By Author

Celebrity Steve Coogan awarded six-figure sum in damages for phone hacking scandal

Known for his portrayal of fictional character Alan Partridge, comedian Steve Coogan was the victim of a hacking scandal that led to details of his personal life published in newspapers, revealing intimate information about his family life, sexual encounters and alleged drug use.

Coogan is amongst dozens of other celebrities who have settled damages claims against Mirror Group Newspaper for reportedly hacking their phones to obtain private information to seemingly publish it in the media and, we assume, sell more papers.

It was a horrid scandal, and the levels of damages awarded goes to show the extent the courts are prepared to go to when people are the victim of malicious hacking.
read more

By Author

Despite data breaches spike most U.K. businesses are confident in preparedness of a breach

This year has seen some of the biggest data breaches and hacks ever seen. Only this summer we witnessed NHS computers attacked by malware demanding a ransom, forcing many hospitals and surgeries to practically shut down across the U.K.

The business sector has also suffered their fair amount of data breaches this year as well. Experts are forever telling us that cybercriminals continue to evolve their techniques, but despite these warnings, businesses are reportedly “gravely optimistic about their ability to deter and cope with malicious attacks.”

Its hardly convincing, is it?
read more

By Author

Abbott to recall 465,000 pacemakers to patch up hacking risk

Another cybersecurity risk involving medical devices. These are, of course, very concerning.

Global healthcare and research firm Abbott is reportedly recalling 465,000 of their pacemakers after discovering a security vulnerability that could expose the medical device to malicious hackers. The recalled devices will have software updated to “reduce the risk of patient harm due to potential exploitation of cybersecurity vulnerabilities“, regulators confirm.

According to reports, hackers could “access a patient’s device using commercially available equipment” and “modify programming commands to the implanted pacemaker, which could result in patient harm from rapid battery depletion or administration of inappropriate pacing.”
read more

By Author

Smiths Medical confirms drug pump hacking vulnerability

Manufacturer of Medfusion 4000 drug pumps, Smiths Medical, has confirmed their medical devices are vulnerable to cyberattacks and could be hacked into remotely.

Hackers may be able to take control of the device and stop it from working, therefore preventing lifesaving drugs being administered to patients.

The manufacturer supplies its drug pumps to hospitals across the globe. It is not known how many of these devices are in use here in the U.K.
read more

By Author