← Front PageCompliance Desk
Compliance
UK water company allowed hackers to lurk undetected for nearly two years, regulator finds
Nearly £1M fine demonstrates how prolonged attacker dwell time amplifies regulatory penalties under UK data protection law, with 630K+ records exposed after two-year compromise window.
Summary written by editorial AI · Source link below
The Information Commissioner's Office (ICO) fined South Staffordshire Water £963,900 ($1.3 million) on Monday over an attack by the Cl0p ransomware group that led to the personal data of 633,887 customers and employees being published in August 2022.
Continue at the source
Read the full report at The RecordExternal link — opens at The Record in a new tab.
§
Continue with
More from the Compliance Desk
- Medical services company settles with 4 states over 2023 hack of sensitive patient records3d
- 3 Frameworks to Protect CISOs & Orgs Against AI Liability27 Oct
- Developing Security Metrics for Automated Compliance Checking26 Oct
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads24 Oct
- 23andMe successor settles with California for $6 million over cybersecurity failings20 Oct