We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.
The New Year’s Honours List is published at the end of every year to recognise the achievements of some of the most successful and influential people in our country. As such, the New Year’s Honours data breach at the end of 2019 was a significant blot on this celebratory event.
In an accidental leak, the addresses of over 1,000 award recipients were published online.
As the turn into 2021 marked just over a year since the leak occurred, we wish to notify victims that they still have a right to claim compensation. We are already taking legal action following the leak, as all organisations must be held accountable for failures to protect private data. Your Lawyers – The Data Leak Lawyers – is here to help any victims of data breaches at all times.
Although the industry has, unfortunately, had quiet year in 2020, it seems this fact has not lessened their risk of travel and leisure data breaches.
Travel and leisure breaches have been prominent in the news with the revelation that companies including Expedia and Booking.com have been affected by a large-scale breach, after their partner Prestige Software failed to password-protect a database containing millions of customers’ booking details. Among the exposed details were guests’ names, phone numbers, email addresses and payment details, inducing risks of both blackmail and fraud.
As the travel and leisure industries continue to be a prime target of hackers, it is important to evaluate the scale of the impact, and to consider why these companies succumb to breaches again and again.
In today’s digital world, we often expect data breaches to occur in cyber settings. However, the risk of data leaks, loss and theft involving physical records and documents is also a cause for concern, and companies still need to be vigilant in protecting their hard material information.
Incidents involving physical records can happen a lot. The all too frequent neglect of physical records is exemplified in the case of Westbury House, a Hampshire care home that closed in 2016 after being deemed an unfit care provider.
It was reportedly found to have abandoned confidential staff and patient information in the uninhabited building. The information was only proved to have been removed and secured at the start of December, 4 years after the care home’s closure. Over the course of these years, obvious negligence could have allowed trespassers to breach the building and rifle through the files. A failure of data protection such as this cannot go unnoticed.
An employee error has recently brought about the Now: Pensions data breach, leading to the online exposure of customers’ personal details.
Now: Pensions, one of the UK’s largest pension providers, was involved in a breach of data protection duties through this leak. The result of the incident left the names, dates of birth, home addresses, and National Insurance numbers of trusting customers vulnerable to misuse.
The firm has accounted for the breach by explaining that a contractor from an external partner inadvertently uploaded the data to a public forum. Although the data was only public for a brief period of time and was removed as soon as the error was identified, the idea that the company’s procedures and systems could not protect against such a mistake is worrying.
A recent leak of patient data has called into question the data protection practices of Lloyds Pharmacy. A parcel containing the prescription records of hundreds of Lloyds pharmacy patients is believed to have been intended for an NHS recipient, but mistakenly reached a personal home 300 miles away instead.
When the unintended recipient opened the box, she was shocked at the mass of details she found, assuming they were intended for the NHS prescription services in Bolton.
While Lloyds Pharmacy has placed the blame on an external courier service who mistakenly delivered the parcel, they may not be able to sidestep their ultimate responsibility for the control and handling of their own data in accordance with the GDPR. The incident undoubtedly highlights the risks organisations take when entrusting an external party with the safety of confidential records.
A recent meeting of local councillors has reportedly highlighted data security problems that could put the Lichfield District Council in breach of the General Data Protection Regulation (GDPR).
The issue surrounds the reported continued use of unencrypted laptops and was raised by Cllr Joanne Grange, who is understood to have expressed concerns that the problems had still not been addressed three years after they were identified in 2017.
It is understood that Cllr Grange suggested that the failure to update working practices in accordance with data protection regulations could be tantamount to “negligence”. Her statements have undoubtedly highlighted some key problems which the council should feel obliged to address as a matter of urgency.
There is still time to make a claim in the Well Pharmacy data breach action.
In 2018, Well Pharmacy, a major pharmacy chain, was responsible for leaking the details of over 24,000 staff and locum workers, after the data was accidentally included in an email.
Since the breach, The Data Leak Lawyers has been working hard to take on claims for affected employees ever since we launched legal action in early 2019. We have been working on the action for just over two years now, and our door is still open to any claimants who have yet to come forward.
A medical data breach is often serious as our medical data often represents the most personal information that we will ever entrust to a third party.
The faith we invest in medical professionals to protect this data is indicative of our confidence in their ability to care, and in the health service more generally.
However, this trust is at risk of being eroded due to the succession of medical data breaches that we have encountered, either first-hand or in the headlines, in recent years. When such breaches occur, the exposed information can be highly sensitive and, depending on the affected individual’s circumstances, can dramatically affect their mental state and/or their relationships. It is vital that the confidential doctor-patient relationship at the heart of the NHS is not damaged by a failure to prevent these exposures.
A recent data leak from a community organisation has reportedly exposed the personal information of highly vulnerable domestic violence victim.
Moving On is a Rochdale-based support service that seeks to help adults with acquired disabilities and provide a safe space for them to work through their difficulties. However, a series of errors reportedly led to the personal data of a former domestic violence victim being sent to a third party and posted online.
The victims in question is understood to have been left ‘terrified’ following the incident, worrying who their personal information may have reached. Rochdale council is investigating the leak to find the cause of the error, but it has already been established that council officials were apparently responsible for sending a letter that unintentionally shared the victim’s details with a third party.
The HaveIBeenPwned platform watches for breaches and can be used to check email addresses to see if an account linked to that email has been compromised in a data breach.
Over the last few months, HaveIBeenPwned has reported huge numbers of data breaches involving millions of records. This can highlight just how frequently these serious breaches are taking place, which is bad for us all.
Data breaches are becoming an increasing threat in society, particularly with the way 2020 evolved with a huge increase in people working from home due to the coronavirus pandemic. Your Lawyers (T/a The Data Leak Lawyers) are experts in the field of data breach law as a leading firm of compensation experts, and we are always keen to help victims of data breaches and fight for the justice that they deserve. We have helped thousands of victims claim millions in damages, and we may be able to help you too.
EasyJet admits data of nine million hacked
British Airways data breach: How to claim up to £6,000 compensation
Are you owed £5,000 for the Virgin Media data breach?
Virgin Media faces £4.5 BILLION in compensation payouts
BA customers given final deadline to claim compensation for data breach
Shoppers slam Morrisons after loyalty points stolen
Half a million customers can sue BA over huge data breach
Lawyers accuse BA of 'swerving responsibility' for data breach
The biggest data breaches of 2020
Fill out our quick call back form below and we'll contact you when you're ready to talk to us.