Welcome To The Data Leak Lawyers Blog

Data breach figures may be four times higher than reported

Security experts warn that the number of data breaches and attacks in the Channel Islands could be four times higher than official figures suggest, due to a lack of reporting.

The Information Commissioner’s Office (ICO) revealed that Jersey reported 52 cases of data protection breaches, while Guernsey reported a further 43. However, according to Business Development and Technical Director of IT security firm Logicalis, Tom Bale, these figures may only be a quarter of the real sum as not all companies and organisations report breaches to the authorities.
read more

By Author

Uber reaches settlement over inadequate data protection for customers

Uber Technologies Inc agreed a settlement with regulators last month after reportedly failing to protect customers from having their personal information accessed by company employees.

Investigations into the popular alternative taxiing service also found that Uber had perhaps been less than honest with the public about their data protection commitments.

Uber, now worth over £13 billion and offering services in 46 countries, have been accused of simply not caring about the data protection rights of their customers, instead simply focusing on profits. They’ve been accused of simply aiming to “amass the greatest database of consumer habits that the world has ever seen.”
read more

By Author

U.S. appeals court split over whether victims can claim for ‘fear of damage’ from data breaches

Although this story is from the U.S., we keep a close eye on American data protection affairs as our laws can be similar, and cases and challenges can reflect on how we may see the law here.

In this big news story from the States, a recent federal appeals court in the U.S. have said that claimants can sue defendants who breach their data protection obligations for ‘fear of damage’, even if no actual damage has occurred. This can make sense, as the damage could be done at any point in the future; but this decision moves away from one Supreme Court case that said claimants needed to prove a risk of “imminent” and “concrete” injury to bring a claim.
read more

By Author

Recruitment manager pleaded guilty for sharing personal information belonging to job applicants

A recruitment manager at HomeServe Limited was prosecuted when it was discovered he’d been sharing personal information belonging to job applicants to a third party employment agency.

According to the Information Commissioners Office (ICO), the 39-year-old recruitment manager “sent copies of 26 CVs containing the personal data of applications seeking employment with HomeServe to an external recruitment firm, without a business need to do so”.

This is a clear breach of data protection laws.
read more

By Author

Another NHS worker fined by the ICO for accessing and disclosing information from medical records

On the 11^th August 2017 yet another NHS (now former) worker was fined by the Information Commissioner’s Office (ICO) for accessing sensitive health records belonging to family, friends and colleagues without authorisation.

She even disclosed information she found.

Brioney Woolfe worked at Colchester Hospital University NHS Foundation Trust as a Midwifery Assistant. The self-confessed ‘nosy’ midwifery assistant reportedly accessed 29 patient medical records, including the parents of her children’s school friends.
read more

By Author

NHS data breach reportedly compromised personal data for hundreds of staff

The Health Service Journal has revealed that the NHS has suffered yet another data breach; this time compromising the personal data of hundreds of staff.

Information about hundreds of junior doctors was reportedly published online in error. The NHS has been plagued by so many data breaches that it doesn’t seem like such a surprise to hear about this story. The healthcare sector is a goldmine for data breaches for a range of reasons, like the value of medical records, as well as the general sensitivity of medical information as well.
read more

By Author

Colossal confidential data breach reportedly throws Swedish government into panic

Sweden’s government is under fire for a huge data breach that may have compromised highly sensitive information of almost all of their citizens, including the identities of military personnel.

The shocking data breach was reported by Swedish national newspaper, Dagens Nyheter. The disclosure was made when the newspaper reported that former director general of the Swedish Transport Agency, Maria Agren, was reportedly fired at the beginning of the year for mishandling sensitive information, and fined $8,500 failing to follow data protection laws.

The head of IT at the agency shamefully admitted that “the keys to the kingdom” had been given away.
read more

By Author

TalkTalk fined £100,000 for putting 21,000 customers at risk of scams and fraud

As if the £400,000 fine last year was not enough, TalkTalk has been slapped with a £100,000 fine for reportedly breaching data protection laws over customer information.

Unlike the last fine which came off the back of countless customers’ information being exposed after a malicious hacking, TalkTalk is being fined for an alleged lack of information security, leaving customer data “open to exploitation by rogue employees.”

TalkTalk employees reportedly have access to a great deal of information, heightening the need for internal security measures.
read more

By Author

ICO cautions NHS staff against illegally accessing patient medical records

The Information Commissioners Office (ICO) has specifically reminded NHS staff not to access patient medical records without proper reason and / or proper authority. Illegally accessing, obtaining and/or disclosing patient medical records without permission is not only a violation of patient data protection rights, but also exposes the wrongdoer and the NHS to legal action and costly fines.

This latest ICO warning was prompted by a recent case where a former health care assistant accessed medical records belonging to several patients without a valid reason. Over a period of a year and a half, Brioney Woolfe reportedly accessed patient files belonging to 29 individuals, including her family members, colleagues and other patients.
read more

By Author

Data breaches in the U.K. retail sector doubled in one year

Data breaches are continually increasing at an alarming rate, and U.K. retailers are a prime cause for data breaches and leaks.

Statistics show that in 2014/15, U.K. retailers reported 17 data breaches. The next year, it increased to 19. However, 2016/17 has seen a sudden spike of 38 reported data breaches, with no signs of slowing down.

These data breaches aren’t just malicious hackers attacking databases, but also include employees accidentally leaking or losing information.
read more

By Author