Welcome To The Data Leak Lawyers Blog

Huge Data Breach hits Myspace and Tumblr

Literally hundreds of millions of Myspace and Tumblr user account details, reportedly hacked a few years ago, have surfaced for sale on the dark web.

News of the incident comes just days after the scale of the 2012 LinkedIn hack widened when millions of account details from the previous hack appeared online for sale, and security experts believe there may be a link given data from separate historic hacks is being put up for sale in such a short period of time.

News of this breach has increased fears for online safety with experts suggesting more may be on the way.
read more

By Author

Research shows victims hold the organisations primarily responsible for data leaks

Research conducted by ResearchBods found that consumers put the responsibility for data leaks, breaches, and hacks firmly on the shoulders of the organisations.

The study results showed that people blame the organisations far more than the hackers, and in terms of how the law actually works, it’s fair to say that the legal responsibility does weigh heavily on organisation (as Data Controllers) anyway.

The excuse “oh, but we were hacked!” is not one that will save an organisation from criminal or civil prosecution!
read more

By Author

Is there any such thing as a “non-serious” data breach?

There are differing levels in terms of severity of data leaks – it could be fair comment to say that a person’s full name being leaked is perhaps not as dangerous as a person’s bank account details being leaked. But it does depend on other factors, like whether a leak of a name is related to a sensitive subject; such as the full name of someone with a certain medical condition, as an example.

If that happens then just a name can be very serious indeed, but in an age where leaks are happening around the world all of the time – and we literally mean, ALL of the time – we ask the question: is there really such thing as a “non-serious” data breach?
read more

By Author

Check Point Claims Limited fined £250,000 for serious data protection breaches

Nuisance calls – the bane of many people’s lives!

Thankfully the Information Commissioner’s Office (ICO) can fine and prosecute organisations for failing to adhere to regulations for marketing calls, and in this example, Check Point Claims Limited has been fined a huge £250,000.00 for failing to comply with the law.

They reportedly made a staggering 17.5 MILLION nuisance calls asking if people had suffered hearing loss at work.
read more

By Author

Data breach compensation

You may not know this but you are entitled to claim for data breach compensation if you are the victim of a data breach. You can claim data breach compensation from organisations leaking your information (like a public service or your employer); from organisations sharing your information without consent; or even from hacks, as examples.

In the digital age we live in, where organisations hold an astounding wealth of information about us, we’re all at risk of our right to privacy being breached, and at risk of scams and frauds.

So what can you claim for in terms of data breach compensation, and on what basis do you claim?
read more

By Author

Kiddicare customer data breach

The details of almost 800,000 customers of UK baby and child retailer Kiddicare have been stolen from a version of their website it had been using for testing.

Customers reported receiving suspicious messages that had not been sent by Kiddicare, and following an investigation, the data breach was linked back to a test website they had used which led to customer data being compromised.

The company has reported itself to the ICO (Information Commissioner’s Office) in light of what has happened.
read more

By Author

56 Dean Street Clinic Fined £180,000 by ICO; a move welcomed by our lawyers leading the fight for justice

The Information Commissioner’s Office (ICO) has concluded its investigations in to the 56 Dean Street Clinic data leak that saw the confidential HIV status of over 700 patients inadvertently leaked by email.

Our lawyers fighting for justice have welcomed the move by the ICO to fine the clinic following the breach. We’ve taken on a large number of cases since the leak, and we’re still taking instructions now (with the latest few being this week).
read more

By Author

Blackpool NHS Fined £185,000 for serious Data Protection Breach

Personal and sensitive data of thousands of employees working for Blackpool Teaching Hospitals NHS Foundation Trust was inadvertently posted online.

The discovery was made on 30^th January 2015 and reportedly affects more than 6,500 employees when a spreadsheet containing highly confidential information was published online back in March 2014.

The data included names, national insurance numbers, birth dates, religious beliefs, pay scales, disability statuses, ethnicity, and sexual orientation.

This is a serious breach of data protection and one of the worst we have ever seen here in the UK.
read more

By Author

Health and Social Care Information Centre signs ICO undertaking after failing to protect against medial data sharing

The Health and Social Care Information Centre (HSCIC) has signed an undertaking to comply with its requirements under the Data Protection Act, having fallen short in the past.

Patients whose data they were dealing with were offered an “opt-out” option for certain data being shared with other organisations, but this was not honoured. As such, anyone who opted out still had their information shared anyway without their consent.

The HSCIC has now reportedly agreed to take a series of steps and have signed an undertaking to ensure they comply with their obligations in the future.
read more

By Author

ICO fine Kent Police £80K for serious data breach of alleged domestic abuse victim

The Information Commissioners Office (ICO) has fined Kent Police £80,000 after the entire contents of an alleged domestic abuse victim’s mobile phone were disclosed to the alleged assailant.

The victim had given her phone to Kent Police on the grounds it contained video footage of the alleged abuse. The contents were copied, but the domestic abuse court case was discontinued.

Her former partner who was accused of the abuse was actually a serving officer at Kent Police and faced separate misconduct proceedings, and as part of the separate case, the entire contents of the phone were then inadvertently disclosed to the solicitor defending the officer.
read more

By Author