Welcome To The Data Leak Lawyers Blog

Royal Free NHS Foundation Trust who shared 1.6million patient information in a clinical tech trial escapes fine from the ICO

Royal Free NHS Foundation Trust who shared the data of 1.6 million patients has escaped a fine from the UK’s information watchdog… The Information Commissioner’s Office (ICO).

The Trust has instead signed an undertaking with the ICO to take certain action in order to ensure data protection rules are complied with in future. The Trust were reportedly using Google DeepMind on a clinical trial when the personal information of 1.6 million patients was shared as part of the clinical trials projects.
read more

By Author

FTC prove that cyber-hackers can access and use breached data within 9 minutes of it being posted

I’m sure many are curious to find out where and how their data is used after hackers gain access to their information. According to a recent study, hackers are reportedly able to use leaked data within 9 minutes of it being posted.

Mr Salsburg, chief counsel and acting chief of research and investigation project at the FTC (Federal Trade Commission), reiterated the mysteriousness of what happens to data when it’s publicised:

“…there’s a real mystery of what happens to consumer data when it becomes public.”

But the dangers of how quickly it can be used are evident.
read more

By Author

Unprotected database containing 10 million U.S. vehicle owners’ personal details leaked

Approximately 10 million U.S. vehicle owners’ personal data was left exposed after a massive database containing their information was leaked.

Security researchers from Kromtech Security found the unprotected database split into three main sections which is thought to contain ‘critical and sensitive information’. The first section includes names, addresses, home and work numbers, dates of birth, gender and the number of children over 12 years old.

This information is thought to have been extracted from numerous U.S. based car dealerships.
read more

By Author

70% of smartphone users sharing more personal information through apps than they realise

Smart phones and apps; again…

Data researchers have found that a large majority of people are installing mobile applications on their phones without realising just how much data they’re sharing. Whilst the apps are required to seek permission before accessing certain information, it has transpired that some apps may be accessing more than users are aware of.
read more

By Author

Are hacked passwords the crux to data breaches?

According to security and risk management company CSO, hacked passwords are reportedly the cause of 81% of data breaches.

Some may then say “users/individuals should be more cautious about what passwords they use” – but what about the responsibility of businesses and organisations to ensure the safety of their users’ personal data?

The impact of one person’s compromised credentials could be felt far and wide…
read more

By Author

Several mainstream apps pay $5.3 million settlement for illegally accessing iOS users’ contacts list

Several popular applications were accused of accessing iPhone user contact address books without their knowledge or consent between 2009 and 2012.

Twitter, Instagram, Yelp and Foursquare are among the companies whose apps were accused of the data breach, and many complaints were made that the practice was a breach of personal privacy. With the number of people affected, the matter was brought to the attention of regulators who found that the social network platform Path were liable for breaches, and a huge settlement has been made.
read more

By Author

UK charities fined for misusing donors’ private information

11 UK charities have been fined for breaching data protection laws.

11 of the UK’s top charities have been fined for misusing their donors’ (aka individuals who donate) personal information. The Information Commissioner’s Office (ICO) have issued fines to the charities for alleged misconduct and breaching the Data Protection act.
read more

By Author

Exam Board, AQA, reportedly compromised 64,000 examiners’ personal details

A school examining board has recently fallen victim to a mass data breach, compromising approximately 64,000 current and former examiners’ personal information.

AQA’s online systems were reportedly hacked on the 21^st March 2017. These online systems stored examiners’ name, addresses, personal phone numbers, and passwords. The examining board were quick to stress that the attacked systems didn’t store any financial details or any personal data of the schools, pupils or exam material.
read more

By Author

95,000 McDonald’s applicants personal information hacked

Food for thought: McDonald’s is the next big corporation to fall victim to a major cyber-attack.

A McDonald’s Canadian unit said that 95,000 job applications were compromised from a cyber-attack that took place on the 31^st March. It’s believed that the cyber-attackers retrieved information such as names, addresses, email addresses, phone numbers, and employment backgrounds from a careers website.

The users affected by the hack are said to be candidates who applied for jobs at one of Canadian branches between March 2014 and March 2017.
read more

By Author

Concerns over NHS plans to move all sensitive patient data up into the Cloud!

We have all heard of the online Cloud data storage; but pardon our old fashioned pessimism, but it sounds like a disaster waiting to happen!

It seems a far-fetched suggestion to trust all of your sensitive data to be stored in something that was named after floating wisps in the air that come and go depending on the weather. With all the data leak incidents and scandals erupting left, right and centre… we can’t be blamed for our scepticism when it comes to uploading personal information on the World Wide Web.

If it’s on the internet, surely hackers will always find their way in? So how is our sensitive medical date ever going to be safe when it’s all accessible online?
read more

By Author