{"id":1718,"date":"2017-07-27T12:22:32","date_gmt":"2017-07-27T11:22:32","guid":{"rendered":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?p=1718"},"modified":"2017-07-27T12:22:32","modified_gmt":"2017-07-27T11:22:32","slug":"government-digital-service-department-leaks-personal-information","status":"publish","type":"post","link":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information","title":{"rendered":"Government digital service department leaks personal information"},"content":{"rendered":"

Many people may have a false sense of security that the Government are able to protect us and our data. Over the years, this belief has decreased massively given there are growing trends of data breaches, with hacks and leaks scarily becoming the norm.<\/p>\n

This is exemplified in the Government\u2019s digital service website – www.data.gov.uk<\/a> – who recently fell victim to a security breach. A spokeswoman said that a database containing usernames and email addresses was discovered on a system which was accessible to the public. This was only discovered during a routine security review.<\/p>\n

So, if the government can’t protect themselves, how can we expect them to protect us?!
\n
\nAfter becoming aware of the breach, the digital service is making all users change their passwords as a precautionary measure. This may be too late to be implementing as a ‘precautionary’ measure though, given that the damage has already been done.<\/p>\n

Not that it should make any difference, but according to the Government, only email addresses, usernames and hashed passwords were breached. Names and physical addresses weren’t leaked.<\/p>\n

Email addresses, usernames, and hashed passwords are still valuable data<\/strong> to cyber-criminals, however! <\/p>\n

They could still use them to access other accounts as many individuals tend to reuse passwords across multiple online accounts.<\/p>\n

So, the risks are still there…<\/p>\n

Notification<\/h2>\n

The Government digital service are aware of their wrongdoing and notified the Information Commissioner’s Office (ICO) of the breach. A spokeswoman told the BBC that the breach had only affected data.gov.uk accounts, meaning users with separate accounts for other government websites weren’t affected.<\/p>\n

The Government digital service sent notification of the breach from this email address –
\n data.gov.uk.support@notifications.service.gov.uk – to warn users to change their passwords. The email stated that “the names, emails and hashed passwords in the file belong to users who registered on data.gov.uk on or before 20th<\/sup> June 2015.”<\/p>\n

Further warnings have been given by the Government department, urging users to be diligent if they receive an email from someone claiming to be from the Cabinet office. It’s important that you check the authenticity of an email recipient before handing over personal information.<\/p>\n

Reassurances<\/h3>\n

The spokeswoman tried to give her reassurances by stating that, because hashed passwords were used i.e. the passwords were scrambled, this formation makes the information less useful. However, as we mentioned above, this doesn’t completely eliminate the risks to people affected by the breach.<\/p>\n

A spokeswoman also stated: <\/p>\n

“…there is no evidence of misuse of anyone’s credentials and users have been asked to reset their passwords purely as a precautionary measure.”<\/em><\/strong><\/p><\/blockquote>\n

Weaknesses of the system<\/h3>\n

Spencer Young, RVP EMEA at Imperva, highlights the importance of a strong password: <\/p>\n

“Passwords continue to be an ‘Achilles Heel’ in the fight against cybercrime as improper user behaviour such as weak passwords or use of the same password across different sites – continues.”<\/em><\/strong><\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Many people may have a false sense of security that the Government are able to protect us and our data. Over the years, this belief has decreased massively given there are growing trends of data breaches, with hacks and leaks scarily becoming the norm. This is exemplified in the Government\u2019s digital service website – www.data.gov.uk … Continue reading Government digital service department leaks personal information<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":1727,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[20],"class_list":["post-1718","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hacking-news","tag-online-security"],"yoast_head":"\nGovernment Digital Service Department Leaks Personal Information<\/title>\n<meta name=\"description\" content=\"The government digital service website recently fell victim to a security breach with email addresses, usernames and hashed passwords taken.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Government Digital Service Department Leaks Personal Information\" \/>\n<meta property=\"og:description\" content=\"The government digital service website recently fell victim to a security breach with email addresses, usernames and hashed passwords taken.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information\" \/>\n<meta property=\"og:site_name\" content=\"Data Leaks, Breaches & Hacks\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/YourLawyersUK\/\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-27T11:22:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-large-min.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"680\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-large-min.png\" \/>\n<meta name=\"twitter:creator\" content=\"@YourLawyers_\" \/>\n<meta name=\"twitter:site\" content=\"@YourLawyers_\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information\"},\"author\":{\"name\":\"Author\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/fc9f019d474c54972e7d226989280bfd\"},\"headline\":\"Government digital service department leaks personal information\",\"datePublished\":\"2017-07-27T11:22:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information\"},\"wordCount\":503,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/gov-min.png\",\"keywords\":[\"online security\"],\"articleSection\":[\"Hacking News\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information\",\"name\":\"Government Digital Service Department Leaks Personal Information\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/gov-min.png\",\"datePublished\":\"2017-07-27T11:22:32+00:00\",\"description\":\"The government digital service website recently fell victim to a security breach with email addresses, usernames and hashed passwords taken.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#primaryimage\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/gov-min.png\",\"contentUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/gov-min.png\",\"width\":725,\"height\":250,\"caption\":\"gov website breached\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/government-digital-service-department-leaks-personal-information#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Government digital service department leaks personal information\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/\",\"name\":\"Data Leaks, Breaches & Hacks\",\"description\":\"Latest News, Articles & Opinions\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#organization\",\"name\":\"Data Leak Lawyers\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/yl_dll_amp.png\",\"contentUrl\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/wp-content\\\/uploads\\\/yl_dll_amp.png\",\"width\":288,\"height\":70,\"caption\":\"Data Leak Lawyers\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/YourLawyersUK\\\/\",\"https:\\\/\\\/x.com\\\/YourLawyers_\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/fc9f019d474c54972e7d226989280bfd\",\"name\":\"Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/81ea840bcfd73a45a8ad425b8e37aa8677eb68d5842c5b86b0101776ca2a5d8e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/81ea840bcfd73a45a8ad425b8e37aa8677eb68d5842c5b86b0101776ca2a5d8e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/81ea840bcfd73a45a8ad425b8e37aa8677eb68d5842c5b86b0101776ca2a5d8e?s=96&d=mm&r=g\",\"caption\":\"Author\"},\"url\":\"https:\\\/\\\/www.dataleaklawyers.co.uk\\\/blog\\\/author\\\/maisie\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Government Digital Service Department Leaks Personal Information","description":"The government digital service website recently fell victim to a security breach with email addresses, usernames and hashed passwords taken.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information","og_locale":"en_GB","og_type":"article","og_title":"Government Digital Service Department Leaks Personal Information","og_description":"The government digital service website recently fell victim to a security breach with email addresses, usernames and hashed passwords taken.","og_url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information","og_site_name":"Data Leaks, Breaches & Hacks","article_publisher":"https:\/\/www.facebook.com\/YourLawyersUK\/","article_published_time":"2017-07-27T11:22:32+00:00","og_image":[{"width":1200,"height":680,"url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-large-min.png","type":"image\/png"}],"author":"Author","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-large-min.png","twitter_creator":"@YourLawyers_","twitter_site":"@YourLawyers_","twitter_misc":{"Written by":"Author","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#article","isPartOf":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information"},"author":{"name":"Author","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/person\/fc9f019d474c54972e7d226989280bfd"},"headline":"Government digital service department leaks personal information","datePublished":"2017-07-27T11:22:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information"},"wordCount":503,"publisher":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#organization"},"image":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#primaryimage"},"thumbnailUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-min.png","keywords":["online security"],"articleSection":["Hacking News"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information","name":"Government Digital Service Department Leaks Personal Information","isPartOf":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#primaryimage"},"image":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#primaryimage"},"thumbnailUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-min.png","datePublished":"2017-07-27T11:22:32+00:00","description":"The government digital service website recently fell victim to a security breach with email addresses, usernames and hashed passwords taken.","breadcrumb":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#primaryimage","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-min.png","contentUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/gov-min.png","width":725,"height":250,"caption":"gov website breached"},{"@type":"BreadcrumbList","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/government-digital-service-department-leaks-personal-information#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.dataleaklawyers.co.uk\/blog"},{"@type":"ListItem","position":2,"name":"Government digital service department leaks personal information"}]},{"@type":"WebSite","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#website","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/","name":"Data Leaks, Breaches & Hacks","description":"Latest News, Articles & Opinions","publisher":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#organization","name":"Data Leak Lawyers","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/yl_dll_amp.png","contentUrl":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-content\/uploads\/yl_dll_amp.png","width":288,"height":70,"caption":"Data Leak Lawyers"},"image":{"@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/YourLawyersUK\/","https:\/\/x.com\/YourLawyers_"]},{"@type":"Person","@id":"https:\/\/www.dataleaklawyers.co.uk\/blog\/#\/schema\/person\/fc9f019d474c54972e7d226989280bfd","name":"Author","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/81ea840bcfd73a45a8ad425b8e37aa8677eb68d5842c5b86b0101776ca2a5d8e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/81ea840bcfd73a45a8ad425b8e37aa8677eb68d5842c5b86b0101776ca2a5d8e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/81ea840bcfd73a45a8ad425b8e37aa8677eb68d5842c5b86b0101776ca2a5d8e?s=96&d=mm&r=g","caption":"Author"},"url":"https:\/\/www.dataleaklawyers.co.uk\/blog\/author\/maisie"}]}},"_links":{"self":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts\/1718","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=1718"}],"version-history":[{"count":2,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts\/1718\/revisions"}],"predecessor-version":[{"id":1724,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/posts\/1718\/revisions\/1724"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/media\/1727"}],"wp:attachment":[{"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=1718"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=1718"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dataleaklawyers.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=1718"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}