Welcome To The Data Leak Lawyers Blog

USB device containing confidential Heathrow Airport data found miles away on a London residential street

Confidential and secretive information for Heathrow Airport was reportedly found on a USB device some 13 miles from the site in a random London neighbourhood, prompting questions over the quality of the U.K.’s airport security.

The data on the device was also found to have had no encryption and wasn’t even password-protected; arguably the most rudimentary security measure that should be implemented for any type of information worth protecting.

How confidential data concerning the U.K.’s largest airport – and potentially a huge target for terrorist attacks – could be removed in this manner is incredibly worrisome.
read more

By Author

ICO publishes useful guides on the new GDPR

Head of policy and engagement at the Information Commissioner’s Office, Jo Pedder, points to useful guidance on the new EU General Data Protection Regulation that is set to come into force come May 2018.

The regulation will bring in some major changes as to how organisations are expected to look after personal data and the responsibilities in disclosing them to the authorities and affected individuals. The changes could mean huge punishments for organisations who fail to take their data protection responsibilities seriously.
read more

By Author

Dyfed-Powys Police Force signs undertaking after multiple data breaches reported

Dyfed-Powys Police Force in Wales signed an undertaking with the Information Commissioner’s Office (ICO) after a number of data breaches over an 18 month period were identified.

The ICO was alerted to the seriousness of multiple incidents that indicated a potential lack of data protection training and protocols. Although none of the breaches appear to have had any underlying malicious intent, the ICO recognised the seriousness of the repeated data breaches.
read more

By Author

Nottinghamshire County Council fined £70,000 for leaving data belonging to vulnerable people exposed for 5 years

The Information Commissioner’s Office (ICO) issued Nottinghamshire County Council a fine of £70,000.00 for leaving sensitive personal data exposed online for half a decade.

The watchdog discovered the council’s ‘Home Care Allocation System’ (HCAS) was shared with care home providers using a simple link that did not require a username or a password.

The system contained a lot of personal information belonging to prospective and current care home users. Created in July 2011, the council was finally alerted to the security risk when a member of the public searched for HCAS online in June 2016 and found files readily accessible and completely unrestricted.
read more

By Author

London Borough of Islington fined £79,000 for security flaw that may have compromised personal data belonging to 89,000 people

The Information Commissioner’s Office (ICO) has found that the London Borough of Islington is liable for breaching data protection duties through their reported failure to keep 89,000 people’s personal data safe on an online parking ticketing database.

Information including sensitive health details, disabilities and financial details were reportedly not properly secured.

Islington Council uses a ‘Ticket Viewer’ system to allow members of the public to review CCTV images or videos of the parking offence so they may check any tickets issued, and it is this system that is at the centre of the breach.
read more

By Author

Despite data breaches spike most U.K. businesses are confident in preparedness of a breach

This year has seen some of the biggest data breaches and hacks ever seen. Only this summer we witnessed NHS computers attacked by malware demanding a ransom, forcing many hospitals and surgeries to practically shut down across the U.K.

The business sector has also suffered their fair amount of data breaches this year as well. Experts are forever telling us that cybercriminals continue to evolve their techniques, but despite these warnings, businesses are reportedly “gravely optimistic about their ability to deter and cope with malicious attacks.”

Its hardly convincing, is it?
read more

By Author

Employees reportedly need updated data security training

As technology in industry improves, many employees are being provided with more and more advanced devices and software to help for a more efficient workplace. From unified portals to mobile devices, employees are often given shiny new tools to work with all the time; but do they know how to use them safely?

A significant proportion of data breaches can result from employee mistakes: from accidental emails being sent, to uploading information online, and hackers targeting vulnerabilities to gain entry into customer databases. Cybersecurity experts have long identified employees as one of the weakest links when it comes to securing data in organisations.
read more

By Author

Security flaw leaves cars vulnerable to being hacked

Researchers say they’ve discovered a security flaw that can affect any vehicle featuring “controller area network” systems – AKA a “CAN bus” – which is basically the network that interconnects components in a car. The “CAN bus” interconnects things like parking assist features, electric windows, and engine control units.

Researchers say hackers can access the connection and bombard it with error messages until the system shuts down to protect its other components. An attacker can therefore theoretically switch off safety features like airbags, ABS brakes, power steering or perhaps even lock someone out of their car.
read more

By Author

HBO files stolen in colossal cyberattack

On 27^th July 2017, cybercriminals reportedly hacked their way into HBO’s database, stealing a gigantic 1.5 terabytes of data.

HBO (full name The Home Box Office) produces some of the world’s best known and critically acclaimed TV ‘series, documentaries, movies, sporting events’ and more. The stolen data includes video footage, internal documents and emails.

So far, no ransom has been demanded for the safe return of the data, leading the company to fear the worst: leaks.
read more

By Author

Avanti self-service food vending kiosks hacked

U.S. payment kiosk vendor, Avanti Markets, recently fell victim to a malware scam. The U.S. kiosk vendor’s innovation is to take away counter services and replace them with an all-serving vending machine that covers whole sandwiches, fruit, drinks and junk food with one payment system.
read more

By Author