Welcome To The Data Leak Lawyers Blog

Scams and fraud from data breaches and data leaks

Scams and fraud from data breaches and data leaks are common. In fact, scams and fraud are common anyway, with more than 10,000 cases reported last year, which was a five percent rise on the previous year.

It can be so easy for people to fall victim to scams and fraud that stem from data breaches, so the big question is how people can protect themselves, and what the organisations who hold our money – and data – can do to protect us as well. The burden of responsibility is a two-way street, and there is plenty that banks and organisations can do to better protect us.
read more

By Author

Kensington and Chelsea council fined £120,000 for indeliberate data breach

The Royal Borough of Kensington and Chelsea council has been fined £120,000 for an indeliberate data breach because the personal details of empty property owners in their constituency was published, contrary to data protection laws.

The Information Commissioner’s Office (ICO) has called it a “serious contravention” which has led to the huge fine being issued of £120,000.

According to the ICO reports, a Freedom of Information (FOI) request had been made in relation to the Grenfell Tower incident as part of research into social inequality, and it was this request that led to the accidental disclosure.
read more

By Author

When employees steal data to engage in personal contact with customers…

There is a very worrying trend of employees stealing data from their workplaces in order to engage personal contact with a customer. More often than not, it is an employee stealing a customer’s mobile phone number and then contacting the customer to “make friends” or try and pursue a romantic interest in the victim.

Clearly, this is wrong.

How will this worrying trend be stopped, and what can victims do if they are contacted by people who have stolen their contact information from a workplace?
read more

By Author

Leicester City Council accidentally send spreadsheet to taxi firms containing details of vulnerable adults and children

Leicester City Council accidentally sent an unsecured spreadsheet to 27 taxi firms that reportedly contained sensitive details of potentially thousands of vulnerable adults and children.

The error occurred as the local government authority were processing tenders for transport of people in care and people with special needs.

Although a recall email was sent, there is no telling just how far the data may have inadvertently spread.
read more

By Author

Council data protection breaches are serious and highly sensitive

Data protection breaches committed by councils / local authorities – or the companies they outsource work to – can be unfortunately common. We advise and represent a large volume of people who have been the victim of a data breach caused by their local council, so we understand how bad they can be.

The serious council data protection breaches can cause a lot of problems for the victims, and given the nature of data that local authorities often hold – these type of breaches can be very sensitive indeed.
read more

By Author

Ex-soldier prosecuted for posting vulnerable adult’s sensitive data on Twitter

The Information Commissioner’s Office (ICO) has released the details of a prosecution and a police undertaking after private and sensitive information was intentionally leaked on social media platform Twitter.

William Godfrey from Kent had been in a relationship with a probation officer when he came into possession of a USB data stick containing sensitive data. He later tweeted some of the sensitive data on the USB device and threatened to release more data as well.

For their part, Surrey Police signed an undertaking to improve their data protection policies and procedures.
read more

By Author

Councils and local government authorities still failing to report data protection breaches

New information from the Big Brother Watch privacy group suggests that local authorities are still failing to report data protection breaches. In May 2018, the new GDPR legislation will come into force and councils will have to abide by regulations that will make the reporting of many data protection breaches compulsory.

But, aside from the impact the new laws may have, we cannot avoid the underlying issue here. With estimations that UK councils have been hit by almost 100 million cyberattacks in the last five years, the fact of the matter is that sensitive data is vulnerable in their hands.
read more

By Author

Fury over huge data protection breach involving child sexual abuse case files

Hundreds of confidential files have been found abandoned in a former office that had recently been vacated by the organisation Change, Grow, Live (CGL).

The entirely avoidable data leak included highly-sensitive records and documents involving vulnerable adults and children; i.e. confidential data that should be completely secure and never left open to being accessed without appropriate authority.

According to reports, files had literally been left behind after CGL vacated the premises.
read more

By Author

The Lead Experts Limited fined £70,000.00 for 100,000 nuisance calls

The Information Commissioner’s Office (ICO) issued The Lead Experts Limited (TLEL) a £70,000.00 fine for reportedly making 111,072 unwanted nuisance calls.

TLEL violated data protection principles and the Privacy and Electronic Correspondence Regulations (PECR) when it failed to obtain real and proper consent from the people they had bombarded with nuisance calls, asking if they wanted to reduce their energy bills.

Today, direct marketing is easier than ever. Making calls to tens of thousands of people is incredibly feasible, and it doesn’t cost a lot to do it.
read more

By Author

NHS outsourcing and the dangers of data breaches

The NHS budget is a hotly-debated topic. Cuts, cuts and more cuts have led to some services being squeezed beyond measure, and the obvious truth is that cost-cutting can directly lead to increased chances of mistakes.

Last year, one huge case of cost-cutting seemingly led to a monumental data breach scenario and millions of pounds being paid to pick up the pieces. In 2017 it was revealed that more than 500,000 pieces of patient information in the five year period between 2011 and 2016 had been lost as a result of outsourcing. Such sensitive data being lost is a huge issue.
read more

By Author