Many of us woke up in the UK this morning to the story that, unbelievably, 150 000 records had been erroneously deleted from the Police National Computer. The data loss, which occurred during a regular weekly purge of data, has been attributed to a coding error which has now been rectified. Reassuring as this may […]
Whilst the news that Manchester United had been hit by a “sophisticated operation by organized cyber criminals” was widely reported on Saturday, little detail has emerged since. In particular, there has been no update to the club’s original statement that “We are not currently aware of any breach of personal data associated with our fans
Following hot on the heels of the announcement of a £20m fine for BA, the Information Commissioner’s Office (ICO) issued a final penalty of £18.4m on Marriott International last Friday. Once again, this has been a long-running saga including, as with BA, the proposal last year of a much larger fine of £99m. It also brings
Information Commissioner Fines Marriott International £18.4m Read More »
The long-running saga of the BA data breach reached its conclusion (probably) last week with the announcement by the Information Commissioner’s Office (ICO) of a £20m fine. Initial comments focused on the huge reduction from the £183m fine that the ICO initially proposed last year; but this is still a significant fine, both in total
Information Commissioner Finalises BA Penalty – What Have we Learnt? Read More »
A number of prominent UK universities are amongst hundreds of organisations globally whose data has been stolen in a ransomware attack on cloud-computing provider Blackbaud. Remarkably, it has emerged that Blackbaud was attacked back in May but waited two months to inform its users. It has also emerged that they paid an undisclosed ransom in
Blackbaud Ransomware Attack – UK Universities and Others Affected Read More »
The BBC have published a fascinating birds-eye view of a ransomware attack at the University of California San Francisco this week. Acting on a tip-off, the BBC were able to follow the on-line ransom negotiations as they happened, culminating in the payment of $1.14m. We can only speculate, but the willingness of the university to
There are many interesting lessons to learn in the unfolding saga at on-line sports retailer Wiggle… Customers first started raising concerns over two weeks ago about orders being placed on their Wiggle accounts (and payments taken) without their knowledge. Some people also reported that they had been locked out of their accounts. The company’s initial
Wiggle – When is a Data Breach not a Data Breach? Read More »
We blogged back in January about how GDPR fines were starting to bite. Now, drawing on data from GDPR Enforcement Tracker, we take a first look at the fines that have been issued under GDPR specifically for data breaches. The database lists 70 fines related to data breaches, ranging in value from €300 to €10m.
I’m sure I wasn’t the only person to be somewhat surprised at the news that Baroness Dido Harding has been appointed to oversee the implementation of the new NHS Covid-19 app. Rightly or wrongly, she will always be associated with the massive data breach at TalkTalk in October 2015 and has received significant criticism for
