Welcome To The Data Leak Lawyers Blog

Equifax admits hacking may have exposed 145 million customers’ personal information

Consumer credit reporting agency, Equifax, has been subject to a hacking that may have led to vital information being stolen, including the following: Full names; Birth dates; Postal addresses; Social Security details; Driver’s Licence numbers.

Reuters reports that some 209,000 consumers’ credit card information may have been accessed.

This is a breach on a monumental scale, and legal action will no doubt follow the incident. This breach is all over the news, and has been deemed as “one of the largest data breaches” to have occurred.
read more

By Author

711 million email addresses reportedly compromised by a Spambot called Onliner

A ‘spambot’ named Onliner has reportedly collected personal information tied to 711 million email addresses and dumped them on a server.

The spambot was designed to infect devices, spreading malicious software that could steal valuable personal information, as well as discharge viruses and spam/junk emails. Spam emails are not only a nuisance but they often carry phishing software; enticing users to click on seemingly harmless links that hide further malware. From there, cybercriminals can trick users into revealing more information, and sometimes bank details directly, as well as taking control of computers.
read more

By Author

Data breach figures may be four times higher than reported

Security experts warn that the number of data breaches and attacks in the Channel Islands could be four times higher than official figures suggest, due to a lack of reporting.

The Information Commissioner’s Office (ICO) revealed that Jersey reported 52 cases of data protection breaches, while Guernsey reported a further 43. However, according to Business Development and Technical Director of IT security firm Logicalis, Tom Bale, these figures may only be a quarter of the real sum as not all companies and organisations report breaches to the authorities.
read more

By Author

Uber reaches settlement over inadequate data protection for customers

Uber Technologies Inc agreed a settlement with regulators last month after reportedly failing to protect customers from having their personal information accessed by company employees.

Investigations into the popular alternative taxiing service also found that Uber had perhaps been less than honest with the public about their data protection commitments.

Uber, now worth over £13 billion and offering services in 46 countries, have been accused of simply not caring about the data protection rights of their customers, instead simply focusing on profits. They’ve been accused of simply aiming to “amass the greatest database of consumer habits that the world has ever seen.”
read more

By Author

U.S. appeals court split over whether victims can claim for ‘fear of damage’ from data breaches

Although this story is from the U.S., we keep a close eye on American data protection affairs as our laws can be similar, and cases and challenges can reflect on how we may see the law here.

In this big news story from the States, a recent federal appeals court in the U.S. have said that claimants can sue defendants who breach their data protection obligations for ‘fear of damage’, even if no actual damage has occurred. This can make sense, as the damage could be done at any point in the future; but this decision moves away from one Supreme Court case that said claimants needed to prove a risk of “imminent” and “concrete” injury to bring a claim.
read more

By Author

Recruitment manager pleaded guilty for sharing personal information belonging to job applicants

A recruitment manager at HomeServe Limited was prosecuted when it was discovered he’d been sharing personal information belonging to job applicants to a third party employment agency.

According to the Information Commissioners Office (ICO), the 39-year-old recruitment manager “sent copies of 26 CVs containing the personal data of applications seeking employment with HomeServe to an external recruitment firm, without a business need to do so”.

This is a clear breach of data protection laws.
read more

By Author

Another NHS worker fined by the ICO for accessing and disclosing information from medical records

On the 11^th August 2017 yet another NHS (now former) worker was fined by the Information Commissioner’s Office (ICO) for accessing sensitive health records belonging to family, friends and colleagues without authorisation.

She even disclosed information she found.

Brioney Woolfe worked at Colchester Hospital University NHS Foundation Trust as a Midwifery Assistant. The self-confessed ‘nosy’ midwifery assistant reportedly accessed 29 patient medical records, including the parents of her children’s school friends.
read more

By Author

NHS data breach reportedly compromised personal data for hundreds of staff

The Health Service Journal has revealed that the NHS has suffered yet another data breach; this time compromising the personal data of hundreds of staff.

Information about hundreds of junior doctors was reportedly published online in error. The NHS has been plagued by so many data breaches that it doesn’t seem like such a surprise to hear about this story. The healthcare sector is a goldmine for data breaches for a range of reasons, like the value of medical records, as well as the general sensitivity of medical information as well.
read more

By Author

Colossal confidential data breach reportedly throws Swedish government into panic

Sweden’s government is under fire for a huge data breach that may have compromised highly sensitive information of almost all of their citizens, including the identities of military personnel.

The shocking data breach was reported by Swedish national newspaper, Dagens Nyheter. The disclosure was made when the newspaper reported that former director general of the Swedish Transport Agency, Maria Agren, was reportedly fired at the beginning of the year for mishandling sensitive information, and fined $8,500 failing to follow data protection laws.

The head of IT at the agency shamefully admitted that “the keys to the kingdom” had been given away.
read more

By Author

TalkTalk fined £100,000 for putting 21,000 customers at risk of scams and fraud

As if the £400,000 fine last year was not enough, TalkTalk has been slapped with a £100,000 fine for reportedly breaching data protection laws over customer information.

Unlike the last fine which came off the back of countless customers’ information being exposed after a malicious hacking, TalkTalk is being fined for an alleged lack of information security, leaving customer data “open to exploitation by rogue employees.”

TalkTalk employees reportedly have access to a great deal of information, heightening the need for internal security measures.
read more

By Author