Welcome To The Data Leak Lawyers Blog

Fury over huge data protection breach involving child sexual abuse case files

Hundreds of confidential files have been found abandoned in a former office that had recently been vacated by the organisation Change, Grow, Live (CGL).

The entirely avoidable data leak included highly-sensitive records and documents involving vulnerable adults and children; i.e. confidential data that should be completely secure and never left open to being accessed without appropriate authority.

According to reports, files had literally been left behind after CGL vacated the premises.
read more

By Author

NHS outsourcing and the dangers of data breaches

The NHS budget is a hotly-debated topic. Cuts, cuts and more cuts have led to some services being squeezed beyond measure, and the obvious truth is that cost-cutting can directly lead to increased chances of mistakes.

Last year, one huge case of cost-cutting seemingly led to a monumental data breach scenario and millions of pounds being paid to pick up the pieces. In 2017 it was revealed that more than 500,000 pieces of patient information in the five year period between 2011 and 2016 had been lost as a result of outsourcing. Such sensitive data being lost is a huge issue.
read more

By Author

When 246,000 U.S. Department of Homeland Security Employees’ details are found on a home computer, it’s time to question data security

The U.S. reported a discovery of 246,000 sensitive personal records belonging to Department of Homeland Security (DHS) employees on a home computer owned by an employee. The department and its employees have a vital mission to “secure the nation from the many threats” the U.S faces.

One can only wonder if they ever suspect their own colleague to be a major security threat to their personal lives…

This, let’s face it, is the kind of thing we do not want to hear about. Although this story hails from across the pond, we’ve had our own issues of a similar nature of course. The Heathrow USB stick incident springs to mind.
read more

By Author

South African data breach compromises 30 million personal records

Creator and founder of HaveIBeenPwned.com, Troy Hunt, discovered yet another data dump last year. This one reportedly contained personal data belonging to millions in this staggering South African data breach.

At the time of discovery, the information was available from an online public database back-up file and even came with a smaller compressed version. Anyone on the site could download the information.
read more

By Author

Malaysia sees colossal data breach that may have affected entire population

Technology website Lowyat.net reportedly discovered a huge Malaysian data breach that saw millions of people have their personal data stolen and leaked on the dark web.

The information was apparently taken from multiple Malaysian mobile phone operators, as well as the Malaysian public sector and commercial company websites.

With over 46 million confirmed records breached, this is one monumental data incident.
read more

By Author

Cloud storage error compromises almost 50,000 records belonging to government and major company employees

Australia was recently hit by a huge data breach when a misconfiguration of a cloud storage system reportedly compromised some 50,000 employee records.

This is thought to be the second largest data breach in Australian history.

A number of employee records were compromised for several government departments, including 3,000 from the Department of Finance; 1,470 from the Australian Electoral Commission; and 300 from the National Disability Insurance Agency.
read more

By Author

The Swedish data breach attack and fraud trial

Swedish prosecutors initiated a huge trial after a number of private and public organisations were hacked. Eight people are reportedly standing on trial for the criminal charges that saw at least 40 million Swedish kronor (£3.6 million) stolen or mishandled.

If convicted, the alleged perpetrators could face eight years in jail for their criminal conduct. The exact number of victims has not been confirmed.

The criminal hacker group reportedly hijacked computers and set up social engineering attacks to steal money from a number of organisations and individuals. The Swedish Prison and Probation Service was hit by a breach, along with 20 companies, four banks, a number of law firms, and private individuals also.
read more

By Author

Lessons learned: the university that came under fire for leaking sensitive and confidential data on its students

The University of East Anglia (UEA) was met with anger and disappointment from students and the general public when it was revealed that a member of staff made a horrific error when they sent out a spreadsheet listing named students’ extenuating circumstances. The spreadsheet identified some 40 students by name and student ID numbers, and had their private and confidential information right next to their names.

The spreadsheet showed which students were entitled to things like longer deadlines as their extenuating circumstances included personal matters such as family illnesses and bereavements; mental health problems, including depression; and even sexual assaults.
read more

By Author

Deloitte belittles data breach for affecting “very few” clients

Corporate finance firm Deloitte disclosed a data breach that compromised its internal emailing system, but apparently the breach only affected a “very few” clients.

Those “very few” clients may be not-so impressed with, what appears to be, the company’s attempts to shrug the data breach off as less-than serious just because a small minority of clients were affected.

The company ironically recently rolled out its Cyber Risk Services and even received applause for its growth in cyber intelligence. This kind of breach for a firm of this nature – much like the Equifax breach – is incredibly worrying.
read more

By Author

Governments demanding answers from Uber over recent data breach

Car-sharing company, Uber Technologies, are facing further questioning from governments as they demand answers over alleged violations of multiple laws and regulations stemming from the 2016 Uber data breach that saw a reported 57 million customers and drivers have their personal information exposed.

The failure to disclose the breach is not being accepted by some regulators and lawmakers. A number of lawsuits have been launched against the popular company with allegations of consumer fraud and deceptive business practices.
read more

By Author