We focus on the latest news surrounding data breaches, leaks and hacks plus daily internet security articles.

A constable at Derbyshire Police has recently faced a misconduct hearing over allegations of unlawfully accessing records of a police incident and then sharing a photo of the file with colleagues.
Although the officer’s actions contravened policing standards and data protection law, he has escaped dismissal and will be allowed to continue serving at Derbyshire Police.
Regardless of the verdict of the hearing, a breach such as this should never have occurred at all. Testaments to the officer’s reportedly “excellent” work as an officer do not erase his culpability for what has been regarded as an incredibly reckless action. As an organisation with access to extensive personal data, the police service has a vital duty to be rigorous in data protection and we should all feel safe that our information with them is secure. Our trust in the police should never be abused.

Following a two-year investigation into credit reference agencies, the Information Commissioner’s Office (ICO) has taken enforcement action against Experian. It was ruled that the company must make “fundamental changes to how it handles people’s personal data”, according to the ICO.
The investigation examined three credit agencies, of which Experian is the only one to reportedly face punitive action for data handling they carry out for direct marketing purposes.
Experian is understood to have taken some steps towards improving their data handling, but it was not enough to satisfy the ICO that data protection law was being adhered to. It is reassuring to know that Experian must make changes, and demonstrates to other companies that any sidestepping of the GDPR will not be tolerated by regulators.

If you are ever affected by a data breach or cybersecurity incident caused by a third-party organisation whom you entrusted your information to, it is important that you know what your rights are in the fallout of such an incident. It may feel difficult to stand up to a huge company or local authority, but if a third party has failed to protect personal data, they should be held responsible for their reckless attitude to data protection.
At Your Lawyers – The Data Leak Lawyers – we have been fighting for the rights of data breach victims for many years, aiming to bring justice for the damage that victims have suffered from. Organisations must stand up and take their data protection duties seriously. If they fail to do so, they should be punished as they would be under other areas of the law.

Another travel industry data breach has recently hit the headlines, with the popular airline IT provider SITA suffering a monumental cyberattack. The SITA data breach is thought to have exposed information belonging to hundreds of thousands of passengers.
Among the affected airlines are those owned by Star Alliance, the world’s largest airline group, and British Airways is also affected. Some of the thousands of clients that we represent for the 2018 BA data breaches have already come forward for our assistance.
The travel industry has been plagued by data breaches, with companies such as Marriott and easyJet falling prey to significant hacks in recent years. The wealth of information that is held by airlines and travel companies makes them prime targets for cybercriminals, and the effects can be devastating for those affected.

It is unsurprising that bank account information and credit or debit card details are among the most sought-after types of data for cybercriminals. This is due to financial motives many hackers have when they carry out cybercrimes. Payment card fraud is, therefore, one of the most significant risks of data breaches, and can occur in many different ways.
If fraudsters gain access to your money, it can be very difficult to recover stolen funds directly. At Your Lawyers – The Data Leak Lawyers – we aim to hold the other guilty party to account in data breach cases, as a leading firm of data breach solicitors. In many instances, it is not just the criminal who is responsible for a data breach, but a third-party organisation may also be at fault if they failed to sufficiently protect personal data, and that is how criminals gained access to the details for you.

In the case of cyberattacks, many organisations follow appropriate reporting procedures, such as notifying the Information Commissioner’s Office of the breach. There is also the need for alerting affected customers, members, or employees of their involvement in a data security incident too. However, many firms may be ignoring cyberattacks and their after-effects, putting those affected in an unacceptable degree of danger, sometimes to preserve their own interests.
At Your Lawyers – The Data Leak Lawyers – as a leading data breach claims firm, we believe cyberattacks are like any other crime and should be reported and dealt with accordingly. Unfortunately, too many organisations view cybersecurity and data protections as luxury additions to their operations, disregarding the dangers they are putting people in.
If you have been affected by a data breach and believe the responsible party is not taking it seriously enough, you may be entitled to claim compensation. It is bad enough to have your data exposed, but to witness dangerous inaction from the organisation involved can only add insult to injury.

Although data breach claims are becoming an increasingly established and important area of legal expertise, trusted data breach lawyers can still be few and far between.
There are some inexperienced firms trying to capitalise on the trend of data breach cases, claiming to have expertise that they do not possess. This is something to watch out for, and it is disappointing to see so many inexperienced companies and disreputable scammers taking advantage of claimants for gain.
At Your Lawyers – The Data Leak Lawyers – we have a long-established reputation for handling data breach cases. We are currently sitting on the Steering Committee responsible for conducting the first GDPR group action case in the UK, against British Airways. We have been fighting for the rights of data breach victims as far back 2014, which is a great deal longer than most other firms.

The Surveillance Camera Commissioner, Tony Porter, has recently spoken of his concerns regarding the technology used by local councils and the police to monitor public movements.
As the government watchdog designed to ensure government compliance with the surveillance camera code of practice, it is worrying that the commissioner believes the restrictions on local authorities may not be sufficient.
In particular, Mr Porter reportedly warned that the use of Automatic Number Plate Recognition (ANPR) cameras is unregulated by central government, likening their usage to MI5 tracking. In fact, the security services are subject to much tighter restrictions, while the level of surveillance led by councils and the police appears to be going under the radar.
At Your Lawyers – The Data Leak Lawyers – we always advocate for personal privacy, so it is worrying that the government may be unnecessarily storing data and information pertaining to members of the public.

A recent fault in the Airbnb website has provoked worries among property hosts, who noticed a login failure that reportedly directed users to the message inboxes of other hosts. The Airbnb data glitch appears to have only been brought to the attention of the company by their users, who discussed the issue on a Reddit forum.
A popular accommodation rental marketplace for holidaymakers, Airbnb downplayed the glitch, and the amount of affected hosts was not immediately confirmed. But such a glitch is concerning as it can expose private and personal information. This can raise fair questions over the security of the company’s systems and its adherence to data protection regulations.
While Airbnb said that the glitch was a small-scale, stand-alone incident, at Your Lawyers – The Data Leak Lawyers – we know that even seemingly elementary errors can be disastrous. If an organisation ever fails to sufficiently protect your data, they may have breached the GDPR, and you could be entitled to claim compensation.

A big Newcastle City Council data leak occurred three years ago after the personal data of thousands of children and their adoptive parents was sent out in an accidental email attachment.
The email concerned a party invitation sent out to 77 people for the council’s adoption summer party, with the inclusion of an internal spreadsheet that should never have been seen by unauthorised eyes.
In a reason that has become all too common in recent council data leaks, human error was blamed for the incident. Indeed, as this explanation recurs and recurs, it raises questions about how much progress has been made in local government data protection. Further, in today’s turbulent times of coronavirus leading to us all having to adapt to a more remote way of working and living, what else needs to be done to rectify these issues.
EasyJet admits data of nine million hacked
British Airways data breach: How to claim up to £6,000 compensation
Are you owed £5,000 for the Virgin Media data breach?
Virgin Media faces £4.5 BILLION in compensation payouts
BA customers given final deadline to claim compensation for data breach
Shoppers slam Morrisons after loyalty points stolen
Half a million customers can sue BA over huge data breach
Lawyers accuse BA of 'swerving responsibility' for data breach
The biggest data breaches of 2020
Fill out our quick call back form below and we'll contact you when you're ready to talk to us.