Welcome To The Data Leak Lawyers Blog

ICO issues True Telecom fine of £85,000.00 and an enforcement notice for nuisance calls

Based in Dartford, True Telecom Limited has been fined by the Information Commissioner’s Office (ICO) for illegally calling people to advertise their services.

The Telephone Preference Service (TPS) reported a number of complaints from individuals who received calls from True Telecom despite being signed up to TPS to specifically let organisations know not to contact them for direct marketing purposes. Organisations who call people to advertise their products and services must first receive consent before they do so.
read more

By Author

Cloud storage error compromises almost 50,000 records belonging to government and major company employees

Australia was recently hit by a huge data breach when a misconfiguration of a cloud storage system reportedly compromised some 50,000 employee records.

This is thought to be the second largest data breach in Australian history.

A number of employee records were compromised for several government departments, including 3,000 from the Department of Finance; 1,470 from the Australian Electoral Commission; and 300 from the National Disability Insurance Agency.
read more

By Author

The Swedish data breach attack and fraud trial

Swedish prosecutors initiated a huge trial after a number of private and public organisations were hacked. Eight people are reportedly standing on trial for the criminal charges that saw at least 40 million Swedish kronor (£3.6 million) stolen or mishandled.

If convicted, the alleged perpetrators could face eight years in jail for their criminal conduct. The exact number of victims has not been confirmed.

The criminal hacker group reportedly hijacked computers and set up social engineering attacks to steal money from a number of organisations and individuals. The Swedish Prison and Probation Service was hit by a breach, along with 20 companies, four banks, a number of law firms, and private individuals also.
read more

By Author

Whole Foods Market hacked, reportedly compromising customer credit card data

Supermarket chain Whole Foods Market Inc has admitted that the company suffered a major data breach through its payment card systems.

In an announcement, they revealed the breach happened through their ‘taprooms’ and full table-service restaurants inside some 40% of their stores, rather than through its checkout services.

This is significant as the company uses a separate payment system for its bars and restaurant to its grocery checkout stations, with most of their customers using the latter. Any breach involving card and banking information is, of course, incredibly serious.
read more

By Author

Lessons learned: the university that came under fire for leaking sensitive and confidential data on its students

The University of East Anglia (UEA) was met with anger and disappointment from students and the general public when it was revealed that a member of staff made a horrific error when they sent out a spreadsheet listing named students’ extenuating circumstances. The spreadsheet identified some 40 students by name and student ID numbers, and had their private and confidential information right next to their names.

The spreadsheet showed which students were entitled to things like longer deadlines as their extenuating circumstances included personal matters such as family illnesses and bereavements; mental health problems, including depression; and even sexual assaults.
read more

By Author

Deloitte belittles data breach for affecting “very few” clients

Corporate finance firm Deloitte disclosed a data breach that compromised its internal emailing system, but apparently the breach only affected a “very few” clients.

Those “very few” clients may be not-so impressed with, what appears to be, the company’s attempts to shrug the data breach off as less-than serious just because a small minority of clients were affected.

The company ironically recently rolled out its Cyber Risk Services and even received applause for its growth in cyber intelligence. This kind of breach for a firm of this nature – much like the Equifax breach – is incredibly worrying.
read more

By Author

Governments demanding answers from Uber over recent data breach

Car-sharing company, Uber Technologies, are facing further questioning from governments as they demand answers over alleged violations of multiple laws and regulations stemming from the 2016 Uber data breach that saw a reported 57 million customers and drivers have their personal information exposed.

The failure to disclose the breach is not being accepted by some regulators and lawmakers. A number of lawsuits have been launched against the popular company with allegations of consumer fraud and deceptive business practices.
read more

By Author

U.K. consumer group sues Google for reportedly violating iPhone users’ privacy

Google is being sued for allegedly violating five million iPhone users’ data protection and privacy rights by collecting personal data without authorisation in 2011 and 2012.

The adeptly named group, Google You Owe Us, believes that Google owes each of the five million consumers hundreds of pounds.

The organisation alleges that Alphabet Inc, the conglomerate parent company of Google, unlawfully collected iPhone users’ personal information by bypassing  smartphones default privacy settings.
read more

By Author

Equifax hit by colossal class action after data breach victims suffer financial fraud

According to multiple sources, a significant number of Equifax customers have been targeted by criminals after their personal information was stolen in the massive Equifax breach. Unwilling to take the hit for Equifax’s incompetence and negligence, many are bringing a major class action claim in the U.S. to recover their losses.

We’re representing a large number of people who have come forward to seek compensation for the Equifax breach here in the U.K. as well. We firmly believe that victims should be entitled to compensation in a case of this nature.
read more

By Author

U.S. Supreme Court may be leaning towards increasing digital data protection; and the U.K. should follow

The Supreme Court justices were engaged in a lively debate over whether the government and law enforcement should be able to access huge amounts of digital data without a warrant. A majority of those involved in the debate appeared to agree that it would be very concerning and goes against data protection rules.

The U.S. Fourth amendment was mentioned a few times, citing an individual’s right to be protected from, “unreasonable searches and seizures by the government”. However, the key element here is whether a search is reasonable or unreasonable.
read more

By Author