Welcome To The Data Leak Lawyers Blog

Disqus reveals data breach from half a decade ago

Half a decade late, blog comment company Disqus has reportedly admitted a data breach that saw email addresses and passwords stolen from 17.5 million users.

Disqus, a global company that provides websites like blogs with an extension so users can leave comments on posts, was hit by hackers. The hackers reportedly managed to steal information dated back to 2007, which included usernames with associated email addresses, sign-up dates, lost login dates and hashed passwords.
read more

By Author

Does a company have to report a data breach?

The simple answer is – at the moment – no.

Companies and organisations are responsible for data breaches, but don’t have to report them, although it’s generally deemed as good practice to report a breach. However, they do not always have a legal obligation to report a data breach under the Data Protection Act (DPA), but this is all set to change in 2018 when the EU GDPR comes into force.

So, in the near future, reporting certain breaches will actually be mandatory…
read more

By Author

Reportedly, only 25% of companies can detect data hacks or data leaks

According to some research, as little as 25% of companies have the technology installed to detect hacking and data breaches.

This is a shocking fact, but not at all surprising; and it’s a reminder of how the huge cyber hacks like the TalkTalk one from 2015 ended up happening. They, as many have been in the past, were just too slow to realise a hack had occurred, and by the time they knew, hundreds of thousands of customers had already had their data accessed.

If only a quarter of businesses can detect these hacks, we’re set for a bleak future when it comes to cybersecurity.
read more

By Author

Medical data still the most commonly breached information

Healthcare breaches are common, but it can also be a case of them being more likely to be reported. Whichever way you look at it, something needs to be done about the continually growing trend of medical data breaches.

All those who work in the healthcare sector have a duty to not disclose, mishandle, or misuse a patients’ personal information. In fact, this is the very foundation of a patient / doctor relationship. However, while most people believe their personal information is protected, data breaches by the NHS and the healthcare sector remain far too common.
read more

By Author

The 2016 Tesco bank hack – when banks are breached

It’s a rare thing for a bank to suffer a data breach, but around this time last year people were left fearful after Tesco suffered a massive security breach in their banking branch.

Reportedly, around 40,000 Tesco Bank accounts were affected with money taken from some 20,000 accounts.

At least £2.5 million was stolen in what was deemed as one of the biggest, successful attacks on a bank to have ever occurred, and potentially the very first, large-scale attack where money was directly stolen from a bank.
read more

By Author

Hundreds of popular websites leaking personal data claim experts

Data security studies have revealed that there are literally hundreds of popular websites and mobile applications leaking personal information. Previous studies suggested even the Royal Mail is one such business leaking data, which goes to show the extent of the problem.

Many of the websites and apps researchers say are guilty of leaking data have an international reach, meaning people from all over the world could be victims to these data leaks. Studies so far have been focused on personally identifiable information (PII), which is data that can be directly linked to the owner.

This is worrying.
read more

By Author

When Europol suffered a data breach

A law enforcement agency suffering a data breach is a worrying thought, especially one as big as Europol – but it can and did happen.

Last year, Europol admitted they were subject to a rather shocking data leak when one of their former employees – a former Dutch police officer – breached the agency’s policies by taking home a confidential file that contained extremely sensitive information on multiple terrorist investigations.

A story from 2016 that’s similar to the recent Heathrow USB device found containing all sorts of sensitive security information, it goes to show the worrying reality that even the forces who are there to protect us can fall foul of a data breach.
read more

By Author

Uber “paid off” hackers to keep quiet on a data breach involving 57 million users

Uber has revealed that the company’s database was hacked in October last year, but instead of alerting authorities and warning users about the breach, they instead paid hackers around £75,000 to keep quiet about the hack, and for assurances that the information would be deleted.

Former chief security officer, Joe Sullivan, reportedly made the decision to cover-up the Uber hack, and it was a decision that cost him his job, his deputy’s job, and risked the security of some 56 million people around the world.
read more

By Author

Former Yahoo CEO and Equifax CEO’s testify for largest data breaches in history

The former Yahoo CEO and Equifax CEO were grilled over perceived failings surrounding two of the world’s largest data breaches in history.

Hackers easily got through both companies’ security systems and stole personal data belonging to millions of people. For two large organisations like Yahoo and Equifax, you’d think such breaches would never happen at all…

Both former company representatives reportedly started out by saying how they’d “changed” since the breaches, but they apparently also struggled when facing intense questioning.
read more

By Author

Equifax data hack: the damage has only just begun…

“On a scale of 1 to 10 in terms of risks to consumers, this is a 10” – says fraud analyst, Avivah Litan on the Equifax data hack.

It has been months since the Equifax hack, but calamity isn’t about to quieten down anytime soon as the hacking exposed confidential information belonging to some 145 million customers, including almost 700,000 in the U.K.

This particular breach is distinct to others because of the wealth of information stolen combined with the company’s somewhat questionable attempts to mitigate the damage…
read more

By Author