The Information Commissioner’s Office (ICO) announced yesterday that it had fined Carphone Warehouse £400 000 over a cyber-attack in 2015. The company’s failure to secure the system allowed unauthorised access to the personal data of over three million customers and 1,000 employees, including: names, addresses, phone numbers, dates of birth, marital status and payment card details. […]
At first glance the announcement of a data breach involving data from 57 million drivers and customers of Uber is a case of more of the same: there have been much bigger breaches over the last few years. However, the revelation that the company didn’t acknowledge the breach for a year, opting instead to pay
The BCI Supply Chain Resilience Report has become an invaluable source of information for both resilience and supply chain professionals over the last few years. The release of the 2017 report this week brings the picture right up to date. In many ways this year’s report confirms the patterns seen in previous years: 65% of
Latest BCI Supply Chain Resilience Report Released Read More »
We are now becoming so used to data breaches that only the most spectacular example receive much attention. Usually they are spectacular because of the sheer volume of data, such as the Yahoo! breach of 2013; but on this occasion the newsworthy feature of the attacks is the sensitivity of the data that was compromised.
According to the Business Continuity Institute’s (BCI) inaugural Information Security Report, 15% of organisations “lost sensitive data” in the last 12 months. Indeed the actual figure could be higher, as a further 15% don’t know if they did or didn’t. Whatever the precise figure, it is broadly in line with a report from IBM in
15% of Organisations have "Lost Sensitive Data" in the Last Year Read More »
The Chairman and CEO of Equifax yesterday became the latest executive to “retire” in the wake of the enormous data breach announced on 7th September; the CIO and CSO having already “retired” two weeks ago. The previous “retirements” coincide with the bottoming out of a steep fall in share price (roughly 33% or $5b) following
The October 2015 data breach at TalkTalk, resulting in the theft of personal data of almost 157,000 customers and a record £400 000 fine, has been widely reported here and elsewhere. However, another serious breach has not been so widely reported. TalkTalk began investigating in September 2014, after receiving complaints from customer that they were
TalkTalk Fined Again by the Information Commissioner's Office Read More »
The Information Commissioner’s Office (ICO) released its 2016/17 annual report on 13th July, which showed another steep rise in the number of data protection incidents. There were a total of 2565 self-reported data protection incidents in 2016/17, an increase of over 30% from the previous year. Once again the top sectors, by number of incidents,
Steep Rise in Self-Reported Data Protection Incidents Read More »
A quick summary of the cyber news today, and it is clear that the same key lessons are emerging as have already been noted this week. Indian restaurant guide, Zomato, is reporting the theft of data of some 17 million users. From the phrasing in their blog, it appears that they have just found the breach,
Business Continuity Awareness Week Day 4 – more cyber news Read More »
