{"id":3704,"date":"2019-04-17T09:34:17","date_gmt":"2019-04-17T08:34:17","guid":{"rendered":"https:\/\/www.dataleaklawyers.co.uk\/blog\/?p=3704"},"modified":"2019-04-17T09:34:17","modified_gmt":"2019-04-17T08:34:17","slug":"bounty-data-breach-leads-to-huge-ico-fine","status":"publish","type":"post","link":"https:\/\/www.dataleaklawyers.co.uk\/blog\/bounty-data-breach-leads-to-huge-ico-fine","title":{"rendered":"Bounty data breach leads to huge ICO fine"},"content":{"rendered":"

The Information Commissioner\u2019s Office (ICO) has issued a fine of \u00a3400,000.00 having concluded their investigations into the significant Bounty data breach.<\/p>\n

We\u2019ve already been contacted for help and taken claims for data breach compensation<\/strong><\/a> forward on a No Win, No Fee basis since news of the fine broke in the media. As many as 14 million individuals may have had their personal data shared, including new mothers and infants by extension.<\/p>\n

The ICO has established that Bounty failed to properly inform users that their data would be shared for marketing purposes. The findings also confirmed that no one was able to give proper and informed consent as well.<\/p>\n

<\/p>\n

About the Bounty data breach<\/strong><\/h3>\n

The Bounty data breach has seen some 34 million personal records shared for around 14 million individuals to 39 third-parties. The third-parties included marketing agencies Acxiom and Indicia, as well as credit-referencing agency Equifax, and telecoms provider Sky.<\/p>\n

Personal records were shared between 1st June 2017 and 30th April 2018, with some shared until 9th<\/sup> January 2018 depending on how the user signed-up to the service.<\/p>\n

The breaches took place prior to the introduction of GDPR which is why the fine isn\u2019t in the millions.<\/p>\n

Information shared in the Bounty data breach<\/strong><\/h3>\n

The ICO investigated Bounty having tagged them as one of the largest suppliers in the data broking industry they were looking at. Information that has been collected and possibly shared with third-parties in the Bounty data breach case includes:<\/p>\n