Tag: data protection
511 articles
ICO Exclusive Audit: Mobile Games Deemed Concerning
A childs tap on a free game can hand companies a trove of data, payments and attention—and the ICOs new probe into the mobile gaming sector shows why that should make parents and players sit up and take notice.
UK data regulator Exclusive: defends criticised MoD breach
The ICO has decided not to open a formal probe after reviewing the MoD’s handling of the 2021 leak that exposed thousands of Afghan allies. But with people still at risk and fixes only partly implemented, can that judgement reassure those whose lives were put in danger?
payment data breach: Stunning Alarming Risk Exposed
About 180,000 people had names and payment details left exposed — putting them at heightened risk of fraud and identity theft; here’s what to do now to protect yourself and why companies must tighten their defenses.
cyber risks: Must-Have Legal Protections & Best Practices
Imagine a software update or personal phone turning into courtroom evidence — cyber incidents now trigger regulatory fines, class actions, and contract disputes. Treat cybersecurity as a legal risk: bring lawyers into governance, tighten contracts and vendor controls, and document AI and BYOD policies before an incident makes the decisions for you.
cyber risk management: Must-Have Best Legal Defense
Cyber incidents aren’t just IT headaches — they’re legal minefields that can trigger fines, lawsuits and boardroom liability. Align contracts, AI governance, vendor controls and BYOD policies so technical breaches don’t become costly legal crises.
auto insurance records Exposed: Shocking Risky Leak
Imagine anyone being able to read your policy—because more than 5 million auto insurance records were left publicly accessible online, putting drivers at immediate risk of fraud and identity theft. This glaring misconfiguration shows how easily useful data can become a goldmine for scammers.
Data minimisation: Stunning GDPR Win Against Experian
The Dutch data watchdog fined Experian €2.7m for collecting and keeping more personal data than necessary, a sharp reminder that GDPR’s data‑minimisation rules aren’t optional. The ruling signals that data brokers and businesses must justify every data point they hold — or face stricter enforcement that could reshape product design, retention policies and privacy controls.
58-hour delay: Stunning £14m fine exposes risky lapse
The ICO fined Capita £14m after a 58‑hour delay in reporting a 2023 breach that exposed 6.6 million records — a stark reminder that slow incident response can magnify harm and erode public trust.
Capita fined £14m: Shocking Risky Wake-up Call
When the company you trust with your data leaves the front door ajar, millions can pay the price — Capita was fined £14m after a 2023 breach exposed 6.6 million records, a sharp reminder that outsourcing data demands airtight security and clear accountability.
EU biometric border system: Stunning but Risky Launch
What was meant to speed travelers through the Schengen area instead triggered 90‑minute queues at Prague, as faulty scanners, integration hiccups and shaky fallback plans laid bare the risks of a rushed rollout. The episode is a wake‑up call: better testing, redundancy and clearer contingency training are needed if the EES is to win back travelers’ time — and trust.
Microsoft 365 Education Risky: Stunning GDPR Alert
An Austrian regulator has ruled Microsoft 365 Education illegally tracked pupils, a landmark GDPR decision that could force cloud giants to adopt privacy-by-default settings and clarify who’s truly responsible for protecting kids’ data. Parents and schools deserve tools that safeguard students without breaking classroom tech.
sensitive information Shocking Prospect Breach Reveals Risk
A cyber gaffe at Prospect exposed sensitive details — including sexual orientation and disability status — for up to 160,000 members. Now the union must act fast with clear fixes and transparent support to rebuild trust and protect vulnerable members.
Clearview AI Stunning ICO Win Sparks Risky Fallout
After a big court win, the ICO can now press ahead with a proposed £7.5m fine against Clearview AI — a landmark ruling that reinforces the UK’s power to hold foreign tech firms to account for using Britons’ facial data without consent.
pasting personally identifiable information: Risky Stunning
We keep pasting customer names, order numbers and card details into ChatGPT because it’s fast — but one casual prompt can lead to fines, fraud and lost trust. Make safe AI the easy choice: use sanctioned tools, DLP and clear rules before your next prompt.
Redis servers: Must-Have Fix for Risky RediShell Flaw
A newly disclosed “RediShell” flaw has left about 60,000 Redis servers exposed and easily exploitable, turning common misconfigurations into urgent security risks. If you run Redis, patch, lock it behind private networks or VPNs, enable AUTH/ACLs, and scan for internet-facing instances now to avoid data theft or persistent compromise.
automated number plate recognition: Must-Have or Risky?
The Home Office is exploring a £60m market engagement to build a centralised app that taps the UK’s ANPR network—promising faster alerts and smarter investigations while sparking vital debates about privacy, oversight and security.
ransomware attack: Stunning Risky Data Theft Exposes Flaws
Asahi has confirmed a ransomware attack that stole data and forced a switch to manual order processing, leaving customers and partners eager to know what was compromised and how quickly the company can restore operations and trust.
digital ID Must-Have or Risky? Exclusive Warning
The UK says its new digital ID will be optional — a welcome reassurance after a 2.76 million-signature petition — but critics warn voluntariness won’t mean much without strong legal safeguards, inclusive design and independent oversight. Whether it stays a genuine choice or becomes a de facto requirement will come down to implementation, privacy protections and how businesses adopt the system.
WestJet data breach: Exclusive Risk to Millions
WestJet revealed a criminal intrusion that exposed personal and loyalty data for about 1.2 million customers, raising urgent questions about airline cybersecurity and what it means for your privacy. Read on to learn what happened, why stolen travel data is so dangerous, and simple steps you can take right now to protect yourself.
Renault UK cyberattack: Urgent Exclusive Risky Data Breach
Renault UK is investigating after a supplier breach exposed customers’ names, phone numbers and registration plates and says it will contact anyone affected while urging extra caution against phishing. It’s a reminder that third‑party systems can put your identity at risk — watch for suspicious messages and keep an eye on accounts and vehicle paperwork.
block UK access: Risky Exclusive ICO Showdown
Imgur’s sudden decision to block UK users after an ICO regulatory notice raises a stark question: can tech platforms really sidestep data-protection rules by simply cutting off access? The ICO says no — and this standoff could cost users services, reshape where creators host content, and test whether regulators can hold global platforms accountable.
Sentinel data lake: Must-Have Boost or Risky Move
Microsoft’s new Sentinel data lake, paired with graph-aware tools and a model context protocol, promises faster detection and richer, automated responses by letting agents reason across unified security signals. It’s an exciting leap toward smarter defenses—if teams can balance the efficiency gains with strong governance, oversight, and safeguards against manipulation.
supply chain breach: Risky Harrods Alert — Must-Read
If you shopped online at Harrods, a supply‑chain breach may have exposed customer data — a reminder that even luxury brands aren’t immune when a trusted vendor is compromised. Check your accounts, enable MFA, and watch for phishing while retailers tighten vendor security and transparency.
prompt injection: Stunning $5 Domain Risk
Could a $5 expired domain let a stranger trick your AI into spilling customer data? Researchers proved it with Salesforce’s Agentforce, a wake-up call that mundane trust failures in AI pipelines can lead to serious leaks and that continuous domain monitoring and layered safeguards are essential.