← Front PageCompliance Desk
Compliance
UK water company allowed hackers to lurk undetected for nearly two years, regulator finds
Nearly £1M fine demonstrates how prolonged attacker dwell time amplifies regulatory penalties under UK data protection law, with 630K+ records exposed after two-year compromise window.
Summary written by editorial AI · Source link below
The Information Commissioner's Office (ICO) fined South Staffordshire Water £963,900 ($1.3 million) on Monday over an attack by the Cl0p ransomware group that led to the personal data of 633,887 customers and employees being published in August 2022.
Continue at the source
Read the full report at The RecordExternal link — opens at The Record in a new tab.
§
Continue with
More from the Compliance Desk
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads2d
- 23andMe successor settles with California for $6 million over cybersecurity failings6d
- WhatsApp Hid Instructions in Help Pages Telling Its AI Chatbot Not to Recommend Privacy Regulators6d
- Provable Compliance: A Protocol for Runtime Compliance Evidence and Transaction-Specific Decisioning19 Oct
- SoK: Failure Modes in Common Criteria Product Evaluation - A Taxonomy and Design-for-Evaluability Guidance9 Oct