Welcome To The Data Leak Lawyers Blog

When Europol suffered a data breach

A law enforcement agency suffering a data breach is a worrying thought, especially one as big as Europol – but it can and did happen.

Last year, Europol admitted they were subject to a rather shocking data leak when one of their former employees – a former Dutch police officer – breached the agency’s policies by taking home a confidential file that contained extremely sensitive information on multiple terrorist investigations.

A story from 2016 that’s similar to the recent Heathrow USB device found containing all sorts of sensitive security information, it goes to show the worrying reality that even the forces who are there to protect us can fall foul of a data breach.
read more

By Author

Uber “paid off” hackers to keep quiet on a data breach involving 57 million users

Uber has revealed that the company’s database was hacked in October last year, but instead of alerting authorities and warning users about the breach, they instead paid hackers around £75,000 to keep quiet about the hack, and for assurances that the information would be deleted.

Former chief security officer, Joe Sullivan, reportedly made the decision to cover-up the Uber hack, and it was a decision that cost him his job, his deputy’s job, and risked the security of some 56 million people around the world.
read more

By Author

Former Yahoo CEO and Equifax CEO’s testify for largest data breaches in history

The former Yahoo CEO and Equifax CEO were grilled over perceived failings surrounding two of the world’s largest data breaches in history.

Hackers easily got through both companies’ security systems and stole personal data belonging to millions of people. For two large organisations like Yahoo and Equifax, you’d think such breaches would never happen at all…

Both former company representatives reportedly started out by saying how they’d “changed” since the breaches, but they apparently also struggled when facing intense questioning.
read more

By Author

Equifax data hack: the damage has only just begun…

“On a scale of 1 to 10 in terms of risks to consumers, this is a 10” – says fraud analyst, Avivah Litan on the Equifax data hack.

It has been months since the Equifax hack, but calamity isn’t about to quieten down anytime soon as the hacking exposed confidential information belonging to some 145 million customers, including almost 700,000 in the U.K.

This particular breach is distinct to others because of the wealth of information stolen combined with the company’s somewhat questionable attempts to mitigate the damage…
read more

By Author

After compromising over 145 million people’s financial data records, Equifax responds by producing an app…

Equifax have faced heavy criticism for a series of failings around the data breach that exposed over 145 million people’s personal data records, with almost 700,000 Brits caught up in the scandal. It was bad enough that a company responsible for credit referencing was easily hacked, especially given that the hack was down to Equifax failing to patch a known security vulnerability.

Their handling of the breach has been heavily criticised by authorities, experts and regulators. There are allegations of delays and failures to report the breach; an arguably dangerous website set up for people to check whether they were affected (which fraudsters can copy to lure people to give away information); and now an app, which is arguably one of worst offenders in terms of breaches and leaks of information.
read more

By Author

Nursing and Midwifery Council dismisses NHS midwife for snooping on medical records

A ‘nosy’ midwife has been sacked by the University Hospitals of Coventry and Warwickshire NHS Trust after she was discovered to have viewed confidential medical records belonging to friends, colleagues and other acquaintances.

Thirty-eight-year-old Vicky Anne Bloxham lost her job as a midwife for the illegal snooping carried out between 2002 and 2016.

In 2016 alone, Bloxham reportedly reviewed the medical records of some 45 friends and acquaintances without authorisation, with one person’s records accessed 13 times in a four-month period.
read more

By Author

Australian ‘Amazing Rentals’ uploads thousands of personal documents online

Australian appliance-rental company, Amazing Rentals, are in trouble with Australian authorities yet again for behaviour that has prompted government discussions over the need to crack down on bad business behaviour.

Around mid-September this year, the Guardian reported that Amazing Rentals “published 26,000 personal documents involving 4,000 customers on the internet.” No further information was provided as to what the details included, but clear concerns were aired over identity theft and credit fraud.

The Australian Information Commissioner’s Office shut down Amazing Rental’s website shortly thereafter and warned the retailer’s customers to take precautions against identity theft and other forms of fraud.
read more

By Author

ICO publishes useful guides on the new GDPR

Head of policy and engagement at the Information Commissioner’s Office, Jo Pedder, points to useful guidance on the new EU General Data Protection Regulation that is set to come into force come May 2018.

The regulation will bring in some major changes as to how organisations are expected to look after personal data and the responsibilities in disclosing them to the authorities and affected individuals. The changes could mean huge punishments for organisations who fail to take their data protection responsibilities seriously.
read more

By Author

Dyfed-Powys Police Force signs undertaking after multiple data breaches reported

Dyfed-Powys Police Force in Wales signed an undertaking with the Information Commissioner’s Office (ICO) after a number of data breaches over an 18 month period were identified.

The ICO was alerted to the seriousness of multiple incidents that indicated a potential lack of data protection training and protocols. Although none of the breaches appear to have had any underlying malicious intent, the ICO recognised the seriousness of the repeated data breaches.
read more

By Author

Equifax hack compromised 15.2 million U.K. records

The gigantic Equifax data breach that saw 143 million U.S. customers have their sensitive credit information breached also affected 15.2 million U.K. records as well. There are thought to be some 700,000 U.K. victims of the breach who may have had their personal and sensitive information stolen.

Equifax has said they will reach out to victims by post to notify them of the data breach and offer free access to some form of data risk mitigation service.
read more

By Author