Welcome To The Data Leak Lawyers Blog

Nottinghamshire County Council fined £70,000 for leaving data belonging to vulnerable people exposed for 5 years

The Information Commissioner’s Office (ICO) issued Nottinghamshire County Council a fine of £70,000.00 for leaving sensitive personal data exposed online for half a decade.

The watchdog discovered the council’s ‘Home Care Allocation System’ (HCAS) was shared with care home providers using a simple link that did not require a username or a password.

The system contained a lot of personal information belonging to prospective and current care home users. Created in July 2011, the council was finally alerted to the security risk when a member of the public searched for HCAS online in June 2016 and found files readily accessible and completely unrestricted.
read more

By Author

Leicester city council worker fined for stealing sensitive personal data to use for his own business

Nilesh Morar worked for Leicester City Council in the Adult Social Care Department where he reportedly stole a wealth of personal sensitive data for personal financial gain.

He reportedly took the information belonging to vulnerable people without the Council’s knowledge or permission.

After he stole the personal data, Morar left his job with the Council to set up his own business, so the motives for stealing the data seem quite apparent.
read more

By Author

London Borough of Islington fined £79,000 for security flaw that may have compromised personal data belonging to 89,000 people

The Information Commissioner’s Office (ICO) has found that the London Borough of Islington is liable for breaching data protection duties through their reported failure to keep 89,000 people’s personal data safe on an online parking ticketing database.

Information including sensitive health details, disabilities and financial details were reportedly not properly secured.

Islington Council uses a ‘Ticket Viewer’ system to allow members of the public to review CCTV images or videos of the parking offence so they may check any tickets issued, and it is this system that is at the centre of the breach.
read more

By Author

Equifax CEO resigned just before testifying over colossal data breach

Former Equifax CEO Richard Smith’s retirement, just days before he was scheduled to testify over the huge data breach at court, has generated a lot of criticism. Although his resignation can be deemed as a positive reaction to the breach that reportedly exposed the details of some 143 million individuals, prosecutors are condemning it as not enough to make up for the “travesty”.

It’s thought that some 209,000 credit card numbers were compromised in the breach, with some belonging to U.K. customers. Reports suggest that Smith will be “keeping $18 million in pension benefits and possibly $30 million in stock options.”
read more

By Author

Celebrity Steve Coogan awarded six-figure sum in damages for phone hacking scandal

Known for his portrayal of fictional character Alan Partridge, comedian Steve Coogan was the victim of a hacking scandal that led to details of his personal life published in newspapers, revealing intimate information about his family life, sexual encounters and alleged drug use.

Coogan is amongst dozens of other celebrities who have settled damages claims against Mirror Group Newspaper for reportedly hacking their phones to obtain private information to seemingly publish it in the media and, we assume, sell more papers.

It was a horrid scandal, and the levels of damages awarded goes to show the extent the courts are prepared to go to when people are the victim of malicious hacking.
read more

By Author

Despite data breaches spike most U.K. businesses are confident in preparedness of a breach

This year has seen some of the biggest data breaches and hacks ever seen. Only this summer we witnessed NHS computers attacked by malware demanding a ransom, forcing many hospitals and surgeries to practically shut down across the U.K.

The business sector has also suffered their fair amount of data breaches this year as well. Experts are forever telling us that cybercriminals continue to evolve their techniques, but despite these warnings, businesses are reportedly “gravely optimistic about their ability to deter and cope with malicious attacks.”

Its hardly convincing, is it?
read more

By Author

HBO to produce multiple endings for Game of Thrones series to throw off leakers

Is this what we have to do nowadays to prevent the problems caused by leaks and hacks? Is this really what we need to stoop to?

It seems so…

The popular HBO network was recently hacked and had an incredible 1.5 terabytes of unreleased footage, scripts and other sensitive documents leaked. In a bid to prevent spoilers from being released, HBO are reportedly creating multiple endings to the popular TV show, Game of Thrones; and who can blame them, I guess?
read more

By Author

Aetna sued for revealing HIV statuses of 12,000 patients

Health insurer, Aetna Inc, is being sued for a serious oversight that reportedly revealed the HIV status of around 12,000 patients when a letter was sent out to customers with large clear windows that referenced HIV medication.

It’s a monumental blunder that’s similar to the London sexual health clinic, 56 Dean Street breach, where an email was sent to over 700 patients with names and email addresses for recipients visible. We act for a large proportion of the people claiming in that action.

The clear window is of course intended to be clear, so the address is shown for posting, but this doesn’t change the fact that the letter clearly hadn’t been properly planned out given that private medical information was visible too.
read more

By Author

Employees reportedly need updated data security training

As technology in industry improves, many employees are being provided with more and more advanced devices and software to help for a more efficient workplace. From unified portals to mobile devices, employees are often given shiny new tools to work with all the time; but do they know how to use them safely?

A significant proportion of data breaches can result from employee mistakes: from accidental emails being sent, to uploading information online, and hackers targeting vulnerabilities to gain entry into customer databases. Cybersecurity experts have long identified employees as one of the weakest links when it comes to securing data in organisations.
read more

By Author

‘Park By Text’ customers may have been impacted by data breach

The mobile parking service – Park By Text – allows users of certain car parks to pay on their smartphones have announced they’ve been subject to a cyberattack, and customers may have had personal information stolen as a result.

Park By Text reportedly discovered malicious software in their systems after a service outage. The company says they do not think any customer information was stolen, but “cannot say this with 100% certainty at this stage”, or at least until investigations come to a close.
read more

By Author