Law Firm’s £60K Cyber Oops: When Data Security Takes a Holiday
The ICO has fined Merseyside-based DDP Law Ltd £60,000 for a cyber-attack that leaked sensitive data onto the dark web. Remember, data protection is not optional—unless you enjoy hefty fines and hosting unwanted guests on your network!
Hot Take:
Oh, DPP Law Ltd., it seems you left the door wide open and even sent out engraved invitations to hackers! Who knew a forgotten admin account could lead to a £60,000 slap on the wrist and a starring role in the “How Not to Handle Cybersecurity” guide? Consider this a pricey reminder that data protection isn’t just a suggestion—it’s the law, literally.
Key Points:
- DPP Law Ltd. fined £60,000 by ICO for a cyber-attack exposing sensitive information.
- Lack of multi-factor authentication on an old admin account was a key vulnerability.
- Hackers accessed 32GB of data, which ended up on the dark web.
- DPP was alerted to the breach by the National Crime Agency, not their own vigilance.
- Significant delay in reporting the breach to the ICO—43 days after discovery.
Already a member? Log in here