Welcome To The Data Leak Lawyers Blog

OneLogin’s data breach – Just how serious was it?

There’s a big demand for cyber security globally as the rise of the digital age continues to pave the way for data breaches, leaks and hacks on an almost continual basis.

Yet despite the rise in cyber security that goes hand in hand with the rise of cybercrime, it seems multiple companies and organisations are still failing in their obligations to protect data securely. In recent news, one of San Francisco Bay area’s most established companies has been hacked, potentially affecting thousands worldwide.
read more

By Author

77 million user account details hacked from popular education platform Edmodo

Reports of the recent Edmodo data breach inform us that around 77 million unique user account details were stolen from the popular education platform.

This online platform is widely used throughout U.S. and Canadian schools to support learning by allowing students, teachers and parents to access learning plans and homework. Media outlet Motherboard reported that nearly 77 million users account details were for sale on the dark web.
read more

By Author

Most sensitive and personal data breach in Australia’s history?

In what is being described as “one of the worst data breaches” in Australian history, naked photos and medical records of hundreds of women have been published online.

The Cosmetic Institute in Bondi was hit by the breach where sensitive data of hundreds of patients who undertook cosmetic surgery at the clinic was accessible outside the clinic. The leaked data is thought to include a wealth of very personal data about the affected victims, so this is a very serious breach indeed.
read more

By Author

AA’s data breach: recovery may not be enough this time…

Leading U.K. motoring company the AA is the latest to be involved in a data breach scandal that could end up crippling for customers.

AA President, Edmund King, finally confirmed they were informed of the potential vulnerability of the AA Shop data on 22^nd April 2017.

The motoring company reportedly misled customers by denying they had any knowledge of the leak and tried to reassure customers that their information was very secure. Researchers weren’t convinced this was the case and so decided to dig deeper, and it has since transpired that AA knew about the vulnerability in their database systems back in April.
read more

By Author

U.K. government reportedly breaching personal data at least once an hour

Some may fall into a false sense of security that governmental departments are the safest place for securing data, but latest statistics reveal that personal data held by governmental departments is being breached at least once an hour!

According to the Commons’ Public Accounts Committee (PAC) report, there were an astonishing 8,995 data breaches in the largest 17 Whitehall departments back in 2015.

The figure amounts to approximately 24 breaches a day; i.e. one an hour!
read more

By Author

U.K. Firms “very unprepared” for data breaches

Telecommunication companies say they expect the number of breaches to rise over the next year and around 75% of these companies are wary that this is the case.

The study, undertaken by analyst firm Ovum, and commissioned by analytics software firm FICO, found that although 53% of U.K. executives believe there will be a growth in attempts to access data, less than half of firms are likely to direct their resources to enhancing cyber-security. This approach is clearly dangerous and reckless.

They’re aware that more and more people are trying to access data, but they seem to forget that, without effective cyber-security, more and more data breaches will be inevitable.
read more

By Author

University of East Anglia under fire for leaking sensitive and confidential data about students

The University of East Anglia has been hit with anger and disappointment from students and the general public after it was revealed that a member of staff made a horrific error in sending out a spreadsheet listing named students’ extenuating circumstances.

The spreadsheet identified the 40 students by name and student ID number and had their private and confidential information with their names. The list of circumstances included things like family illness and bereavements; mental health problems including depression; and sexual assault cases.

We have already been contacted for advice and we’re investigating the issues.
read more

By Author

Yahoo’s CISO responds to data breach questions

Sometimes the Chief Information Security Officer’s (CISO) role is hidden in the shadows, and they may generally be unheard of. However, Yahoo’s CISO, Bob Lord, has been in the limelight in recent years after two massive data breaches – arguably the biggest ones in recent history – that affected approximately a billion and a half of Yahoo’s users.

Mr Lord made jokes during an interview at TechCrunch Disrupt New York saying that he “may have broken a record” for the amount of emails sent. The email that circulated was to inform users of the breach.

Not sure the rest of us are finding this funny…
read more

By Author

“Target” to pay $18.5 million settlement for 2013 data breach

Target has agreed to pay out a whopping $18.5 million to U.S customers after a nationwide data breach.

Millions of customers had their personal information compromised back in 2013.

The data breach affected customers’ contact, account, and billing information. It’s believed that a total of 60 million customers were affected.
read more

By Author

DocuSign data breach puts users at risk

DocuSign – the company that lets users ‘sign’ documents digitally – has admitted they have been hacked.

During the data breach, hackers managed to take user email addresses, and cyber-criminals haven’t wasted any time as multiple users have already reportedly fallen victim to phishing emails.

The lack of delay means that DocuSign didn’t even have time to warn users that their information was compromised and to look out for “malicious third party” activity. Reportedly, users were enticed to click on a harmless looking Microsoft Word document, but the document contained certain malware to steal passwords and banking information.
read more

By Author