Welcome To The Data Leak Lawyers Blog

Fury over huge data protection breach involving child sexual abuse case files

Hundreds of confidential files have been found abandoned in a former office that had recently been vacated by the organisation Change, Grow, Live (CGL).

The entirely avoidable data leak included highly-sensitive records and documents involving vulnerable adults and children; i.e. confidential data that should be completely secure and never left open to being accessed without appropriate authority.

According to reports, files had literally been left behind after CGL vacated the premises.
read more

By Author

When 246,000 U.S. Department of Homeland Security Employees’ details are found on a home computer, it’s time to question data security

The U.S. reported a discovery of 246,000 sensitive personal records belonging to Department of Homeland Security (DHS) employees on a home computer owned by an employee. The department and its employees have a vital mission to “secure the nation from the many threats” the U.S faces.

One can only wonder if they ever suspect their own colleague to be a major security threat to their personal lives…

This, let’s face it, is the kind of thing we do not want to hear about. Although this story hails from across the pond, we’ve had our own issues of a similar nature of course. The Heathrow USB stick incident springs to mind.
read more

By Author

South African data breach compromises 30 million personal records

Creator and founder of HaveIBeenPwned.com, Troy Hunt, discovered yet another data dump last year. This one reportedly contained personal data belonging to millions in this staggering South African data breach.

At the time of discovery, the information was available from an online public database back-up file and even came with a smaller compressed version. Anyone on the site could download the information.
read more

By Author

Lessons learned: the university that came under fire for leaking sensitive and confidential data on its students

The University of East Anglia (UEA) was met with anger and disappointment from students and the general public when it was revealed that a member of staff made a horrific error when they sent out a spreadsheet listing named students’ extenuating circumstances. The spreadsheet identified some 40 students by name and student ID numbers, and had their private and confidential information right next to their names.

The spreadsheet showed which students were entitled to things like longer deadlines as their extenuating circumstances included personal matters such as family illnesses and bereavements; mental health problems, including depression; and even sexual assaults.
read more

By Author

Equifax hit by colossal class action after data breach victims suffer financial fraud

According to multiple sources, a significant number of Equifax customers have been targeted by criminals after their personal information was stolen in the massive Equifax breach. Unwilling to take the hit for Equifax’s incompetence and negligence, many are bringing a major class action claim in the U.S. to recover their losses.

We’re representing a large number of people who have come forward to seek compensation for the Equifax breach here in the U.K. as well. We firmly believe that victims should be entitled to compensation in a case of this nature.
read more

By Author

U.S. Supreme Court may be leaning towards increasing digital data protection; and the U.K. should follow

The Supreme Court justices were engaged in a lively debate over whether the government and law enforcement should be able to access huge amounts of digital data without a warrant. A majority of those involved in the debate appeared to agree that it would be very concerning and goes against data protection rules.

The U.S. Fourth amendment was mentioned a few times, citing an individual’s right to be protected from, “unreasonable searches and seizures by the government”. However, the key element here is whether a search is reasonable or unreasonable.
read more

By Author

Analysts expect Equifax to spend 2018 dealing with the aftermath of their huge data breach

Equifax’s recovery could be long and arduous after the gigantic data breach that saw around 143 million people have their confidential and personal information exposed.

Following the company’s attempts to clean up the mess, some believe that it may take much longer than expected to recuperate from the fallout of the breach. Unsurprisingly, one of the firm’s first actions was to follow the customary move of firing the CEO (with a cushy multi-million pension to boot) and hire a new one to take charge and sort out the problem. But when new CEO Paulino do Regos Barros Jr. was asked in a recent interview whether consumer data was now encrypted, many cringed when he was stumped and admitted: “I don’t know at this stage”.

Not the best start…
read more

By Author

The Hyatt Hotel breaches – a painful recovery story after multiple data breaches

We hear about data breaches all the time, and we see the reactions by offending companies as they try to provide what may appear to be “politically-drafted” apologies to the thousands of victims they have potentially harmed.

But what about on the long run? How does a company repair the broken trust, confidence and loyalty of their consumers?

For a hotel, the recovery can be even more painful: as we’ll see in the example of the Hyatt Hotel breaches.
read more

By Author

There’s a reported shortage of cybersecurity specialists to protect organisations from breaches

The number of breaches are on the rise and they’re set to continue to rise due to an apparent shortage of experts trained in cybersecurity.

The Information Systems Security Association (ISSA) teamed-up with IT firm Enterprise Strategy Group (ESG) to produce a report on cybersecurity. Released one year after their first one, the report depicts a problem that is getting worse.

And we should all be very, very concerned about it…
read more

By Author

Organisations reportedly still not doing enough to prevent data breaches…

Many organisations are still only reacting to data breaches when they hit the news; but why aren’t they doing more to prevent data breaches and stop them from happening in the first place?

Each time a breach happens, real people and real lives are often affected. Organisations are not always seeing how a data breach can have huge psychological impact on the victims that can cause lasting harm and financial losses, and cause huge financial loss to the organisations themselves.

Will the attitude toward data security ever change?
read more

By Author