Welcome To The Data Leak Lawyers Blog

Yahoo’s CISO responds to data breach questions

Sometimes the Chief Information Security Officer’s (CISO) role is hidden in the shadows, and they may generally be unheard of. However, Yahoo’s CISO, Bob Lord, has been in the limelight in recent years after two massive data breaches – arguably the biggest ones in recent history – that affected approximately a billion and a half of Yahoo’s users.

Mr Lord made jokes during an interview at TechCrunch Disrupt New York saying that he “may have broken a record” for the amount of emails sent. The email that circulated was to inform users of the breach.

Not sure the rest of us are finding this funny…
read more

By Author

“Target” to pay $18.5 million settlement for 2013 data breach

Target has agreed to pay out a whopping $18.5 million to U.S customers after a nationwide data breach.

Millions of customers had their personal information compromised back in 2013.

The data breach affected customers’ contact, account, and billing information. It’s believed that a total of 60 million customers were affected.
read more

By Author

DocuSign data breach puts users at risk

DocuSign – the company that lets users ‘sign’ documents digitally – has admitted they have been hacked.

During the data breach, hackers managed to take user email addresses, and cyber-criminals haven’t wasted any time as multiple users have already reportedly fallen victim to phishing emails.

The lack of delay means that DocuSign didn’t even have time to warn users that their information was compromised and to look out for “malicious third party” activity. Reportedly, users were enticed to click on a harmless looking Microsoft Word document, but the document contained certain malware to steal passwords and banking information.
read more

By Author

Ffrees customer personal information has been exposed in a data breach

Ffrees is an online banking service that lets customers transfer money into their Ffrees account for discounted shopping, where users may benefit from discounts on purchases in various shops

Recently, they have come under fire for data protection and compliance issues.

Ffrees have previously come under scrutiny for their terms and conditions, but now it seems the company has failed to secure their customers’ personal information following a cyber security incident.
read more

By Author

Most UK businesses expect to be a data breach victim this year

According to IT Pro Portal, the “majority of UK businesses expect a data breach this year”.

For those who follow this blog, this probably isn’t news at all…

In the past few years, data breaches are becoming so common that they’re almost a norm. Businesses in the UK are being targeted more and more; either directly or with certain malware worms that seek out vulnerable servers.
read more

By Author

Survey finds that if you make over around £60,000 annually or graduate from University, you’re more likely to become a target of credit/debit card fraud.

Cyber-criminals are targeting more “affluent” individuals to obtain more money, studies have found.

Like a burglar deciding between a modest house and a luxurious one, they’re apparently choosing the ones that are likely to have more valuables. With the continual rise of malware, criminals are becoming more and more sophisticated and are taking on higher security risks for higher stakes.
read more

By Author

Yahoo exposed for not cooperating with data breach investigations

Multinational technology company ‘Yahoo’ hasn’t seen the end to the ongoing criticisms since the first cyber-attack in 2013.

On 11^th May 2017, Germany’s federal cyber agency The German Federal Office for Information Security (BSI) noted Yahoo was being uncooperative in their investigation into a series of cyber-hacks that compromised approximately 1 billion accounts between 2013 and 2016.

According to the BSI, an additional 32 million Yahoo users were affected by cyber-breaches in 2015 and 2016, but have yet to hear of any cyber-breaches affecting Yahoo users in 2017.

When will it end?
read more

By Author

Manchester Police fined for losing videos of violent and sexual crime victims

The Information Commissioner’s Office (ICO) has concluded their investigations into the Greater Manchester Police (GMP) after video footage of crime victims were lost in the mail.

The video footage included interviews with vulnerable victims speaking about crimes of a violent and/or sexual nature. The package containing 3 DVDs were sent by recorded delivery to the Serious Crime Analysis Section (SCAS), but never arrived.

The footage was not encrypted.
read more

By Author

Cyber insurance surges in demand amidst growing concerns over cyber security

As cyber-crime continues grow, companies are recognising the need for cybercrime insurance.

The industry is reported to be worth around a staggering £7.7 billion. The demand is ever increasing as companies and authorities are finally starting to see the true impact cyber-crime can have. Entities of all shapes and sizes are being targeted by intelligent cyber criminals who have the programming skills to bring security systems down and access any number of data once thought safe.
read more

By Author

New York medical records discovered on an unsecured server

Medical records are known to be a treasure trove for hackers. Once cyber-criminals have access to these, they can sell them on the black market for up to $10 (£7.67) per record, according to Anthony James at U.S. security firm, TrapX.

But it seems cyber-criminals don’t have to hack into computer systems to access records as a ‘huge trove’ of confidential U.S. medical records were found on an unsecured server; accessible to malicious hackers and cyber-security professionals.
read more

By Author