Industry News

15Nov

Medical worker in Kilmarnock suspended over data breach

A medical worker has been suspended from Crosshouse Hospital in Kilmarnock, following a data breach. It is alleged the man inappropriately accessed patient records, before contacting some women using the information he took. Police Scotland have confirmed they are investigating the claims, saying that inquiries are at an early stage. Read full story. 
  • Posted by Smeeta Padhiar
  • On 15th November 2018
  • 0 Comments
  • data breach, data protection, ICO, information security, Insider threat, NHS
  • Read More
13Nov

Launch of the online toolbox

Tony Porter, the Surveillance Camera Commissioner (SCC), has launched his online toolbox – a collection of resources to help organisations comply with the surveillance camera code of practice and follow good practice and legal requirements. Read full story. 
  • Posted by Smeeta Padhiar
  • On 13th November 2018
  • 0 Comments
  • cctv, cyber security, GDPR, SCC, surveillance camera commissioner, Tony Porter
  • Read More
13Nov

Car crash data thief ‘unlucky’ to be jailed

A car repair worker has been sentenced to jail for stealing customers’ personal data from his former employer. The Information Commissioner’s Office (ICO) says it is the first time someone will go to prison as a result of a case it has prosecuted. Mustafa Kasim stole accident information and the names, phone numbers and vehicle […]
  • Posted by Smeeta Padhiar
  • On 13th November 2018
  • 0 Comments
  • cyber security, data protection, ICO, information security, London
  • Read More
12Nov

UK government says which organisations must meet NIS requirements

On Friday 9 November the UK government will define exactly who counts as ‘operators of essential services’ and thus required to ensure their technology, data and networks are secured and cyber resilient in line with the European Security of Network and Information Systems (NIS) Directive requirements. Read full story. 
  • Posted by Smeeta Padhiar
  • On 12th November 2018
  • 0 Comments
  • cyber security, cyber threats, information security, IT security, NCSC, NIS, UK Gov, vulnerabilities
  • Read More
09Nov

Top banks in cyber-attack ‘war game’

The Bank of England is testing the UK’s ability to withstand a major cyber-attack on financial institutions. Some 40 firms, including leading banks, are taking part in a one-day “war-gaming” exercise designed to assess their resilience. The Bank is conducting the exercise on Friday in partnership with regulators and the Treasury. Read full story. 
  • Posted by Smeeta Padhiar
  • On 9th November 2018
  • 0 Comments
  • Bank of England, cyber attack, cyber security, cyber threat
  • Read More
09Nov

‘UK Will Be Hit By Category One Cyber-Attack,’ Says Government Director

The UK has not yet faced what would be considered a ‘category one’ cyber-attack, but there is little doubt that it will happen in the years ahead, according to Peter Yapp, the deputy director at the National Cyber Security Centre, which is a core part of the UK government intelligence agency, GCHQ. Read full story. 
  • Posted by Smeeta Padhiar
  • On 9th November 2018
  • 0 Comments
  • cyber attack, cyber security, cyber threats, NCSC, Peter Yapp, UK Gov
  • Read More
07Nov

UK Brexiteer Banks’s company fined over data breaches

LONDON (Reuters) – The United Kingdom’s data watchdog said on Tuesday it was fining Brexit campaigner Arron Banks’s insurance company and the Leave.EU campaign for serious breaches of electronic marketing regulations. The move piles pressure on Banks, who is being investigated by Britain’s serious crime agency over the true source of 8 million pounds ($10.4 million) […]
  • Posted by Smeeta Padhiar
  • On 7th November 2018
  • 0 Comments
  • Brexit, data breach, data protection, ICO, information security
  • Read More
06Nov

Facebook users’ data, private messages found up for sale online

Facebook is reportedly suggesting that malicious browser extensions may be behind yet another data breach affecting users of the social media platform – this one involving at least 257,256 stolen profiles, including 81,208 that included private messages. Read full story. 
  • Posted by Smeeta Padhiar
  • On 6th November 2018
  • 0 Comments
  • cyber crime, cyber security, dark web, Data Breack, Facebook, information security
  • Read More
02Nov

Private messages from 81,000 hacked Facebook accounts for sale

Hackers appear to have compromised and published private messages from at least 81,000 Facebook users’ accounts. The perpetrators told the BBC Russian Service that they had details from a total of 120 million accounts, which they were attempting to sell, although there are reasons to be sceptical about that figure. Facebook said its security had […]
  • Posted by Smeeta Padhiar
  • On 2nd November 2018
  • 0 Comments
  • cyber crime, cyber security, data breach, data protection, Facebook, hackers
  • Read More
01Nov

Defence Cyber Protection Partnership

The Defence Cyber Protection Partnership (DCPP), a government industry initiative was formed to create a joint response to the cyber threat. The DCPP aims to protect our military capability by improving cyber defence through the MOD’s supply chain while preserving existing investment in cyber security measures. Read full story. 
  • Posted by Smeeta Padhiar
  • On 1st November 2018
  • 0 Comments
  • cyber security, cyber threat, DCPP, ministry of defence, MOD, national security
  • Read More
31Oct

GDPR Alert as Average ICO Fines Double in a Year

The value of fines issued by the Information Commissioner’s Office (ICO) has increased 24% in the year to September 30 versus the previous year, according to new data. Law firm RPC calculated that the total cost of financial penalties issued by the UK’s data protection watchdog stood at £4.98m, up from £4m in the previous […]
  • Posted by Smeeta Padhiar
  • On 31st October 2018
  • 0 Comments
  • data protection, GDPR, ICO, information security, Infosec
  • Read More
31Oct

Hackers target UK universities accredited by NCSC

A group of Iranian cybercriminals has attempted to hack into the systems of 18 or more UK universities this year, in a campaign lasting several months and successfully penetrating the defences of at least one target. Half of the universities that the group focused on offer degrees in cybersecurity, approved by the National Cyber Security Centre […]
  • Posted by Smeeta Padhiar
  • On 31st October 2018
  • 0 Comments
  • cyber attack, cyber crime, cyber security, hackers, NCSC, UK Universities
  • Read More
29Oct

Children’s toys and baby monitors can be taken over by hackers, security services warn

Children’s toys and baby monitors connected to the internet can be taken over by hackers, the security services have warned. The National Cyber Security Centre (NCSC) has issued new guidance calling on manufacturers to ensure devices sold to British families are secure. Read full story. 
  • Posted by Smeeta Padhiar
  • On 29th October 2018
  • 0 Comments
  • Baby Monitors, Children Toys, cyber attacks, cyber security, IoT, NCSC, vulnerabilities
  • Read More
26Oct

Second hack attack on BA website uncovered

More than 185,000 people may have had payment card details stolen in a hack attack on the BA website. The victims were caught out by a website compromise that had gone undetected for months. BA only discovered the breach while investigating a breach of its website in September, which affected 380,000 transactions. Read full story. 
  • Posted by Smeeta Padhiar
  • On 26th October 2018
  • 0 Comments
  • British Airways, cyber attack, cyber security, data protection, hack, information security
  • Read More
25Oct

Cathay Pacific data hack hits 9.4 million passengers

Cathay Pacific says the personal data of up to 9.4 million passengers have been accessed in the latest security breach to hit the aviation industry. Passport numbers, email addresses and expired credit card details were among the data leaked. Chief executive Rupert Hogg apologised and said there was “no evidence” the information had been misused. […]
  • Posted by Smeeta Padhiar
  • On 25th October 2018
  • 0 Comments
  • Cathay Pacific, cyber security, data breach, data protection, information security
  • Read More
24Oct

Elizabeth Denham announced as the new chair of the International Conference of Data Protection and Privacy Commissioners (ICDPPC)

Elizabeth Denham was announced as the new chair of the International Conference of Data Protection and Privacy Commissioners (ICDPPC) on 23 October 2018. She said: “In the age of borderless data flows, there has never been a more important time for global coherence in data protection and privacy. Read full story. 
  • Posted by Smeeta Padhiar
  • On 24th October 2018
  • 0 Comments
  • data protection, Elizabeth Denham, ICDPPC, ICO, privacy
  • Read More
22Oct

ICO reveals 400% increase in reports of cyber-security incidents

The Information Commissioner’s Office (ICO) has reported a 400 percent increase in cyber-security incidents being disclosed to it following the implementation of GDPR. In the period from April to June 2018 (Q1 of the current government financial year), there were 414 reports of “cyber-incidents” made to the ICO from various industries. This compares to 97 […]
  • Posted by Smeeta Padhiar
  • On 22nd October 2018
  • 0 Comments
  • cyber attacks, cyber security, data breaches, data protection, ICO, information security
  • Read More
19Oct

Theresa May to urge EU leaders to take action on cyber-attacks

Theresa May will urge EU leaders meeting in Brussels to create a new sanctions regime to crack down on governments found responsible for cyber-attacks. Amid growing fears about Russian meddling in foreign elections, including in Europe, and attempted cyber-attacks, most recently on the chemical weapons watchdog in the Netherlands, the prime minister will call on her […]
  • Posted by Smeeta Padhiar
  • On 19th October 2018
  • 0 Comments
  • cyber attacks, cyber security, cyberwar, EU, IT security, Theresa May
  • Read More
16Oct

UK cyber-centre thwarts hostile hackers

The UK’s top cyber-defence centre has stopped Britain falling victim to almost 1,200 attacks in the last two years, its annual review reveals. The National Cyber Security Centre (NCSC) was currently defeating about 10 attacks every week, it said. Most of the attacks were carried out by state-sponsored hackers employed by hostile nations, it added. Read […]
  • Posted by Smeeta Padhiar
  • On 16th October 2018
  • 0 Comments
  • cyber attacks, cyber security, GCHQ, hackers, NCSC
  • Read More
15Oct

Taxi firms slam Aberdeenshire Council’s new contract procurement scheme amid allegations of data breaches

Taxi firms have criticised Aberdeenshire Council’s “shambolic” new system for tendering school transport contracts.  The local authority spends about £13million on school transport every year, and has recently upgraded the tender process for taxi and bus contracts. But two firms have now separately complained about the way the council dealt with additional support needs (ASN) […]
  • Posted by Smeeta Padhiar
  • On 15th October 2018
  • 0 Comments
  • Aberdeenshire Council, data breach, data protection, information security, Taxi Contracts
  • Read More
15Oct

MoD secrets exposed in dozens of cyber security breaches

Ministry of Defence secrets were exposed in dozens of breaches of military cyber security policy last year, as hostile nations and spy agencies continue to probe the UK’s defence sector. Heavily redacted reports obtained by Sky News have revealed that the MoD and its partners failed to protect military and defence data in 37 incidents […]
  • Posted by Smeeta Padhiar
  • On 15th October 2018
  • 0 Comments
  • cyber security, data breach, IT security, ministry of defence, MOD
  • Read More
12Oct

UK’s NCSC to monitor internet routing to stop DDoS and hijacks

The United Kingdom’s National Cyber Security Centre (NCSC) continues to push the boundaries of cyberdefence. It’s been implementing simple things at scale to great effect. And for an intelligence agency — it’s part of GCHQ — it’s continuing to be remarkably open. Two years ago, NCSC technical director Dr Ian Levy outlined his plans to […]
  • Posted by Smeeta Padhiar
  • On 12th October 2018
  • 0 Comments
  • cyber attack, cyber defence, cyber security, DDoS, NCSC, threat intelligence
  • Read More
11Oct

Securing cyber resilience in health and care: October 2018 update

In February 2018 the department published ‘Securing cyber resilience in health and care: February 2018 progress update’, which set out the actions taken by the department and its arm’s length bodies to improve the cyber security of the health and care system both before and after the May 2017 WannaCry cyber attack, as well as […]
  • Posted by Smeeta Padhiar
  • On 11th October 2018
  • 0 Comments
  • cyber attack, Cyber Resilience, cyber security, Health and Care, IT security, wannacry
  • Read More
09Oct

Google to shut down Google+ after failing to disclose user data leak

This March, as Facebook was coming under global scrutiny over the harvesting of personal data for Cambridge Analytica, Google discovered a skeleton in its own closet: a bug in the API for Google+ had been allowing third-party app developers to access the data not just of users who had granted permission, but of their friends. Read […]
  • Posted by Smeeta Padhiar
  • On 9th October 2018
  • 0 Comments
  • data breach, data protection, data security, google, information security
  • Read More
08Oct

Heathrow Airport Limited fined £120,000 for serious failings in its data protection practices

Heathrow Airport Limited (HAL) has been fined £120,000 by the Information Commissioner’s Office (ICO) for failing to ensure that the personal data held on its network was properly secured. On 16 October 2017 a member of the public found a USB memory stick, which had been lost by a HAL employee. The stick, which contained […]
  • Posted by Smeeta Padhiar
  • On 8th October 2018
  • 0 Comments
  • data protection, Heathrow Airport, ICO, information security
  • Read More
04Oct

UK accuses Russia’s GRU military intelligence of cyber attacks

The UK government has accused Russia’s military intelligence service of being behind four high-profile cyber attacks. The National Cyber Security Centre says targets included firms in Russia and Ukraine; the US Democratic Party; and a small TV network in the UK. World Anti-Doping Agency computers are also said to have been attacked. Read full story. 
  • Posted by Smeeta Padhiar
  • On 4th October 2018
  • 0 Comments
  • cyber attacks, cyber security, IT security, ransomware, Russia
  • Read More
02Oct

Bupa fined £175,000 for systemic data protection failures

Bupa Insurance Services Limited (Bupa) has been fined £175,000 by the Information Commissioner’s Office (ICO) for failing to have effective security measures in place to protect customers’ personal information. Between 6 January and 11 March 2017, a Bupa employee was able to extract the personal information of 547,000 Bupa Global customers and offer it for […]
  • Posted by Smeeta Padhiar
  • On 2nd October 2018
  • 0 Comments
  • BUPA, dark web, data protection, data protection act 2018, data security, GDPR, ICO, information security, IT security
  • Read More
02Oct

Fears that 65,000 Gloucestershire residents fell victim to huge data breach

More than 65,000 Forest of Dean residents’ personal data may have been hacked after a cyber-attack hit a credit rating agency the district council there sold information to. Names, addresses, telephone numbers and dates of birth of residents in the Forest could have been compromised in an attack on finance company Equifax which in total […]
  • Posted by Smeeta Padhiar
  • On 2nd October 2018
  • 0 Comments
  • data breach, data protection, equifax, Gloucestershire, ICO, information security
  • Read More
02Oct

Conservative Party conference app reveals MPs’ numbers

Conservative MPs including Boris Johnson have had their phone numbers and other personal details revealed by the party’s conference app. A Guardian columnist highlighted the security breach on Twitter and the BBC was also able to access private details of people attending the event. The Conservative Party apologised for “any concern caused” and said “the […]
  • Posted by Smeeta Padhiar
  • On 2nd October 2018
  • 0 Comments
  • Conservative Party, data protection, ICO, Security Breach. Cyber Security
  • Read More
26Sep

Tesco Bank facing £30m fine from FCA over 2016 cyber attack

Tesco Bank could be fined as much as £30 million over its 2016 cyber attack that compromised the accounts of at least 40,000 of its seven million customers. The attack in November 2016 is one of the most serious ever on a UK retail bank, with money stolen from 20,000 accounts over one weekend – […]
  • Posted by Smeeta Padhiar
  • On 26th September 2018
  • 0 Comments
  • cyber attack, cyber security, FCA, ICO, information security, Tesco Bank
  • Read More
25Sep

UK set to build major new cyber-defence force

The UK is improving its ability to wage cyber war significantly, adding more personnel and more money. According to a new report by Sky News, UK’s cyber-warfare taskforce will be 2,000 strong and will receive at least (and probably more) £250m in funding. The taskforce will be comprised of military personnel and contractors, and represents a […]
  • Posted by Smeeta Padhiar
  • On 25th September 2018
  • 0 Comments
  • cyber defence, cyber security, cyber warfare, ministry of defence
  • Read More
21Sep

Vote Leave data firm hit with first ever GDPR notice

A Canadian analytics firm that worked for Vote Leave has received the UK’s first formal notice under a key data law, the UK’s data protection watchdog has confirmed. AggregateIQ (AIQ) was accused of processing people’s data “for purposes which they would not have expected”. The firm has appealed against the notice, which was issued by […]
  • Posted by Smeeta Padhiar
  • On 21st September 2018
  • 0 Comments
  • Brexit, Canada, data protection, GDPR, ICO
  • Read More
21Sep

Britain steps up cyber offensive with new £250m unit to take on Russia and terrorists

Britain will step up its cyber crime offensive against the threat from Russia and terrorist groups with a new £250m joint taskforce between the Ministry of Defence and GCHQ, it was reported last night. The unit, which will be made up of some 2,000 recruits from the military and security services industry, is set to quadruple […]
  • Posted by Smeeta Padhiar
  • On 21st September 2018
  • 0 Comments
  • cyber crime, cyber security, GCHQ, IT security, ministry of defence
  • Read More
20Sep

Equifax fined by ICO over data breach that hit Britons

Credit rating agency Equifax is to be fined £500,000 by the Information Commissioner’s Office (ICO) after it failed to protect the personal data of 15 million Britons. A 2017 cyber-attack exposed information belonging to 146 million people around the world, mostly in the US. Read full story. 
  • Posted by Smeeta Padhiar
  • On 20th September 2018
  • 0 Comments
  • cyber attack, cyber security, data protection, equifax, ICO, information security
  • Read More
19Sep

Cybercriminals target the printer, the weakest link in your wireless network

Choosing a printer these days is more than about the print resolution or the speed of printing. It turns out, the humble printer sitting in the corner of your office is the weakest link in an office network and poses as a security threat in the event of a breach. It is this piece of hardware […]
  • Posted by Smeeta Padhiar
  • On 19th September 2018
  • 0 Comments
  • cyber attack, cyber security, cyber threat, data breach, data protection, IT security
  • Read More
19Sep

Banks urged to upgrade ATM security systems amid threats of fresh cyberattacks

The FBI contacted banks last month to warn against a potential large-scale, highly choreographed operation known as an ‘ATM Cash Out’, which would see millions of dollars fraudulently withdrawn from cash machines all around the world in just a few hours via hacked bank accounts or payment card processors. The alert said small to medium-sized […]
  • Posted by Smeeta Padhiar
  • On 19th September 2018
  • 0 Comments
  • AI, Artificial Intelligence, ATM, cyber attacks, cyber security, IT security
  • Read More
18Sep

Amazon investigates claims that employees sold confidential data

Amazon is investigating allegations that some of its employees have offered to leak confidential information and delete negative product reviews in exchange for money. According to a Wall Street Journal report on Sunday, Amazon (AMZN) staff members are peddling internal data and other advantages that independent merchants can use to try to get higher rankings […]
  • Posted by Smeeta Padhiar
  • On 18th September 2018
  • 0 Comments
  • Amazon, data protection, data security, information security
  • Read More
18Sep

Council apologises for data breach

Parents have spoken of their shock after an email that was sent to them regarding their disabled children shared their email addresses with more than 150 people. Cornwall Council had sent out an email to parents whose children are registered as disabled, with the council offering a new max card scheme. Read full story. 
  • Posted by Smeeta Padhiar
  • On 18th September 2018
  • 0 Comments
  • Cornwall Council, data breach, data protection, information security
  • Read More
17Sep

Cyber attack led to Bristol Airport blank screens

Bristol Airport has blamed a cyber attack for causing flight display screens to fail for two days. An airport spokesman said the information screens were taken offline early on Friday to contain an attack similar to so-called “ransomware”. Read full story. 
  • Posted by Smeeta Padhiar
  • On 17th September 2018
  • 0 Comments
  • Bristol Airport, cyber attack, cyber security, IT security, ransomware
  • Read More
14Sep

Edinburgh Uni Hit by Major Cyber-Attack

The website of Edinburgh University was still down at the time of writing after the institution suffered a major cyber-attack during its Freshers’ Week. A university spokesman told the Edinburgh Evening News that it has “rigid measures in place” to protect IT systems and data. Read full story. 
  • Posted by Smeeta Padhiar
  • On 14th September 2018
  • 0 Comments
  • cyber attack, DDoS, Edinburgh University, threat intelligence
  • Read More
12Sep

Ciaran Martin’s speech at the CBI Cyber Conference

Ciaran Martin, CEO of the National Cyber Security Centre, speaking on 12 September at the CBI Cyber Conference. Read full story. 
  • Posted by Smeeta Padhiar
  • On 12th September 2018
  • 0 Comments
  • CBI Conference, Ciaran Martin, cyber security, IT security, NCSC
  • Read More
12Sep

TV Licensing urges thousands to check bank statements after security error

Thousands of people who bought TV licences have been urged to check their bank statements for suspicious activity.From August 29 to 5 September 2018, around 40,000 transactions made on TV Licensing’s website were “not as secure as they should have been”.  The company is now advising anyone who entered sort codes and bank account numbers […]
  • Posted by Smeeta Padhiar
  • On 12th September 2018
  • 0 Comments
  • data protection, data security, information security, Infosec, TV licence
  • Read More
12Sep

Almost all UK businesses have suffered some kind of security breach

Nearly every business in the UK has been affected by a form of data breach over the last year, new figures have claimed. According to a new report by Carbon Black, out of roughly 250 C-suites that were polled, 92 per cent confirmed to have been breached in the last year. Out of those that […]
  • Posted by Smeeta Padhiar
  • On 12th September 2018
  • 0 Comments
  • cyber attacks, cyber crime, cyber security, data breach, malware, phishing, Security Beach
  • Read More
11Sep

British Airways: Suspect code that hacked fliers ‘found’

A cyber-security firm has said it found a malicious script injected into the British Airways website, which could be the cause of a recent data breach that affected 380,000 transactions. A RiskIQ researcher analysed code from BA’s website and app around the time when the breach began, in late August. Read full story. 
  • Posted by Smeeta Padhiar
  • On 11th September 2018
  • 0 Comments
  • British Airways, cyber security, data breach, data protection
  • Read More
10Sep

Ten things we know about the BA website breach

British Airways reported that its website and web app had been breached by attackers who downloaded customer data including credit card details, email addresses and postal addresses. While details are sketchy at this point, this is what we have found out so far about the BA breach. Read full story. 
  • Posted by Smeeta Padhiar
  • On 10th September 2018
  • 0 Comments
  • British Airways, cyber attack, cyber security, data breach, information security, IT security, pci dss
  • Read More
07Sep

British Airways boss apologises for ‘illicit’ data breach

The chief executive of British Airways has apologised for what he has called a very sophisticated breach of the firm’s security systems. Alex Cruz told the BBC that hackers carried out a “sophisticated, malicious criminal attack” on its website. The airline said personal and financial details of customers making bookings had been compromised. About 380,000 transactions […]
  • Posted by Smeeta Padhiar
  • On 7th September 2018
  • 0 Comments
  • British Airways, cyber security, data breach, data protection, GDPR, ICO, information security, IT security
  • Read More
06Sep

Human error top cause of self-reported data breaches

New research from the security firm Kroll has revealed that self-reported data breaches are seven times more likely to be caused by human error than by hackers. The firm filed a Freedom of Information request to obtain data on self-reported incidents from organisations to the Information Commissioner’s Office (ICO) to learn that 2,124 incidents reported […]
  • Posted by Smeeta Padhiar
  • On 6th September 2018
  • 0 Comments
  • cyber security, data breach, data protection, GDPR, ICO, information security, security breach
  • Read More
05Sep

Internal auditors identify cyber-security as top risk

Internal auditors say cyber-security is now the biggest risk facing their organisations, in part due to structural insecurities in corporate networks, the threat of data breaches and the growing sophistication of cyber-criminals. And it’s not just fines that worry auditors but the fact that the regulator can freeze operations by halting the processing of data in […]
  • Posted by Smeeta Padhiar
  • On 5th September 2018
  • 0 Comments
  • Auditors, cyber crime, cyber security, data breaches, IT security, risk management, vulnerabilities
  • Read More
05Sep

UK small businesses hit by five cyberattacks each year

New research has shed light on the growing threats faced by small businesses in the UK that faced an average of five cyber attacks over the course of the last 12 months. According to Appstractor’s new independent report titled “Under Attack: Assessing the struggle of UK SMBs against cyber criminals”, some businesses (19%) faced as many […]
  • Posted by Smeeta Padhiar
  • On 5th September 2018
  • 0 Comments
  • cyber attacks, cyber crime, cyber security, IT security, SMBs
  • Read More
04Sep

ICO Breach Reports Jump 75% as Human Error Dominates

The volume of data breach incidents reported to the UK’s watchdog over the past two years increased 75% as organizations geared up for the new data protection regime, according to a new FOI request. Risk management firm Kroll also found that human error accounted for the vast majority (88%) of incidents reported to the Information […]
  • Posted by Smeeta Padhiar
  • On 4th September 2018
  • 0 Comments
  • cyber attacks, data breach, data protection, human error, ICO, information security, Infosec
  • Read More
04Sep

Majority of UK firms not insured for data breaches

Only a third of UK organisations have insurance that covers them for security breaches and financial impact of data loss, a survey shows. The survey also shows that only 29% of firms have dedicated cyber insurance in place, despite 81% of senior executives polled saying it is “vital” their organisation is insured against data breaches, […]
  • Posted by Smeeta Padhiar
  • On 4th September 2018
  • 0 Comments
  • Cyber Insurance, cyber security, data breach, data protection, information security, NIS
  • Read More
03Sep

Data breach reports surge by 75pc as firms obey new rules

Privacy watchdogs have seen reports of data breaches surge 75pc over the last two years as companies battled cyber attacks and prepared to comply with tougher new rules. Elizabeth Denham, the information commissioner, received 3,156 reports last year from businesses and public bodies that had exposed personal data, including bank detail, criminal and health records as […]
  • Posted by Smeeta Padhiar
  • On 3rd September 2018
  • 0 Comments
  • cyber attacks, cyber security, data protection, Elizabeth Denham, ICO, information security, Privacy Watchdog
  • Read More
31Aug

‘Serious data protection flaw’ in Student Leap Card system

There is a “serious flaw” in the Student Leap Card system which allows college agents access to the personal details of a large number of students across the country, without their knowledge. Third-level students can apply for the transport card, which allows them travel at a discount. Read full story. 
  • Posted by Smeeta Padhiar
  • On 31st August 2018
  • 0 Comments
  • cyber security, data breach, data protection, information security, University College Dublin
  • Read More
30Aug

Council apologises for decade-long data breach

A Welsh council has been criticised for leaving sensitive personal information on their website for 11 years.  Documents containing people’s names, addresses and medical conditions have been available on Ceredigion Council’s website since 2007 when the breach was first reported. Read full story. 
  • Posted by Smeeta Padhiar
  • On 30th August 2018
  • 0 Comments
  • Ceredigion Council, data breach, data protection, ICO, information security, Infosec
  • Read More
30Aug

Air Canada app data breach involves passport numbers

Air Canada’s app has suffered a data breach resulting in the suspected loss of thousands of its customers’ personal details. The airline has warned that users who had entered their passport details into the product may have had that data stolen. Experts warn that the theft of such information would pose a serious ID fraud […]
  • Posted by Smeeta Padhiar
  • On 30th August 2018
  • 0 Comments
  • Air Canada, cyber security, data breach, data protection, information security, Infosec
  • Read More
29Aug

UK universities targeted by Iranian hackers

UK universities are among those targeted by a cyber threat group associated with the Iranian government.  Cyber intellectual property thieves have targeted more than 70 universities in the UK and 13 other countries, according to the Secureworks Counter Threat Unit (CTU). Read full story. 
  • Posted by Smeeta Padhiar
  • On 29th August 2018
  • 0 Comments
  • Cyber Espionage, cyber security, cyber threat, hackers, UK Universities
  • Read More
29Aug

Email attacks on the rise, say 80% of businesses

Impersonation attacks have increased 80 percent quarter on quarter, according to a new report. The latest figures show that Impersonation or Business Email Compromise (BEC) attacks have spiked enormously. According to the new ESRA report from Mimecast, which tests the efficiency of email security systems, a significant 203,000 malicious links within 10,072,682 emails were deemed safe […]
  • Posted by Smeeta Padhiar
  • On 29th August 2018
  • 0 Comments
  • Cyber Security. Phishing, Email Attacks, IT security, malware, threat intelligence
  • Read More
28Aug

UK data breach complaints soar under new EU rules

The number of complaints over data protection breaches has more than doubled since the EU’s General Data Protection Regulation came into force. The Information Commissioner’s Office said it had received 6,281 complaints from May 25, when GDPR took effect, to July 3. That compared with 2,417 complaints in the same period last year. Read full story. 
  • Posted by Smeeta Padhiar
  • On 28th August 2018
  • 0 Comments
  • data breach, data protection, GDPR, information security
  • Read More
24Aug

West Ham could face investigation after sharing personal data of up to 200 season ticket holders in email error

West Ham United could face a data breach investigation over allegations bungling staff shared personal details of hundreds of season ticket-holders in a round-robin email. Angry fans took to Twitter on Thursday night to complain their names were among up to 200 email addresses on a blanket message sent out to confirm tickets for next week’s […]
  • Posted by Smeeta Padhiar
  • On 24th August 2018
  • 0 Comments
  • data breach, data protection, human error, ICO, information security, West Ham
  • Read More
24Aug

UK SMBs are struggling to manage their data

Changing work habits and increased data regulation present the perfect opportunity for UK SMBs to take control of their data. New research from Seagate has shed light on the data habits of UK SMBs revealing that many British companies are finding it difficult to store and manage their organisation’s data effectively. Read full story. 
  • Posted by Smeeta Padhiar
  • On 24th August 2018
  • 0 Comments
  • cyber security, data protection, data security, GDPR, information security, Infosec, SMBs
  • Read More
23Aug

Almost a Third of Orgs Still Not Completely Prepared for GDPR

New research has revealed that more than a quarter of organizations (28%) do not feel completely compliant with the General Data Protection Regulation (GDPR), despite now being passed the 25 May deadline. Read full story. 
  • Posted by Smeeta Padhiar
  • On 23rd August 2018
  • 0 Comments
  • data protection, GDPR, information security, Orgs
  • Read More
23Aug

Google Hit With Lawsuit Over Location Tracking

A lawsuit accuses Google of “the surreptitious location tracking of millions of mobile phone users via its Android mobile operating system and mobile apps.” The plaintiff in the lawsuit, filed in U.S. District Court in the Northern District of California on Friday, is Napoleon Patacsil of San Diego. He says he’s owned an iPhone since 2016 […]
  • Posted by Smeeta Padhiar
  • On 23rd August 2018
  • 0 Comments
  • data protection, data security, google, governance, information security, privacy
  • Read More
22Aug

Superdrug’s online customers targeted by criminals

Superdrug has warned its online customers to change their passwords after criminals claimed to have obtained their personal details. The chain said the group claimed they had stolen details of 20,000 customers, but it had only seen evidence so far that 386 customers had been affected. Read full story. 
  • Posted by Smeeta Padhiar
  • On 22nd August 2018
  • 0 Comments
  • cyber attack, cyber crime, cyber security, data protection, data security, Superdrug
  • Read More
21Aug

Inside the British military base where young hackers learn to stop cybercrime

At the heart of a police operation to defend Britain from attack by cybercriminals, a 14-year-old boy was honing his skills to thwart hackers linked to a rogue state. Ben Abrahmason was among a group who gathered at a military base in Wiltshire on Friday to counter fictional but sophisticated cyber-attacks. Read full story. 
  • Posted by Smeeta Padhiar
  • On 21st August 2018
  • 0 Comments
  • British Military, cyber attack, cyber crime, cyber security, hackers
  • Read More
21Aug

NHS Trusts have lost nearly 10,000 patient records in the last year

According to a report by Parliament Street, the UK-based think tank, NHS Trusts have reported 9,132 stolen or misplaced patient records. The disclosure has prompted concerns over its implications for data security and patient safety, with experts warning of an increase in the sales of such records on the dark web. Read full story. 
  • Posted by Smeeta Padhiar
  • On 21st August 2018
  • 0 Comments
  • dark web, data protection, information security, Infosec, NHS trusts
  • Read More
20Aug

Thousands of smart homes and businesses at risk of data breach

New research from cybersecurity firm Avast has revealed that cybercriminals could gain access to smart homes through misconfigured Message Queuing Telemetry Transport (MQTT) servers. The firm found that over 49,000 MQTT servers were publicly visible on the internet as a result of a misconfigured MQTT protocol including 32,000 servers with no password protection, putting them […]
  • Posted by Smeeta Padhiar
  • On 20th August 2018
  • 0 Comments
  • cyber crime, cyber security, IoT, IT security, smart homes
  • Read More
16Aug

A third of businesses still aren’t GDPR compliant

Businesses are still struggling to become compliant with GDPR, risking huge fines in the process, new research has found. A report by MarketingSignals polling more than 1,000 UK workers found 37 per cent of businesses are still not following GDPR. Read full story. 
  • Posted by Smeeta Padhiar
  • On 16th August 2018
  • 0 Comments
  • business, data protection, GDPR, information security
  • Read More
14Aug

Only half of UK firms feel confident in their in-house cybersecurity

New research has revealed that only 56 per cent of UK firms believe they have sufficient cyber security skills in-house to deal with today’s growing threats. In its 10th annual Data Health Check survey, Databarracks questioned over 400 IT decision makers in the UK to better understand their views on a series of critical issues […]
  • Posted by Smeeta Padhiar
  • On 14th August 2018
  • 0 Comments
  • cyber security, cyber threats, IT security, UK business
  • Read More
10Aug

Butlin’s says guest records may have been hacked

Holiday camp firm Butlin’s says up to 34,000 guests at its resorts may have had their personal information stolen by hackers. The company says the data in question included names, home addresses, email addresses and telephone numbers. Managing director Dermot King apologised for the incident and said no financial information was compromised. Read full story. 
  • Posted by Smeeta Padhiar
  • On 10th August 2018
  • 0 Comments
  • Butlins, cyber security, data protection, hackers, ICO, information security
  • Read More
09Aug

Emma’s Diary fined £140,000 for selling personal information for political campaigning

The Information Commissioner’s Office (ICO) has fined Lifecycle Marketing (Mother and Baby) Ltd, also known as Emma’s Diary, £140,000 for illegally collecting and selling personal information belonging to more than one million people. The data broking company, which provides advice on pregnancy and childcare, sold the information to Experian Marketing Services, a branch of the credit […]
  • Posted by Smeeta Padhiar
  • On 9th August 2018
  • 0 Comments
  • data protection, GDPR, ICO, information security
  • Read More
07Aug

Yahoo fined £250,000 over cyber-attack

Yahoo’s UK arm has been fined £250,000 ($335,000) by the UK Information Commissioner’s Office (ICO) over a data breach affecting more than 500 million users which took place in 2014. The incident was reported two years later. The firm said “state-sponsored” hackers had stolen personal information, which included names, emails, unencrypted security questions and answers. Read […]
  • Posted by Smeeta Padhiar
  • On 7th August 2018
  • 0 Comments
  • cyber attack, cyber crime, cyber security, data breach, data protection, ICO, information security, yahoo!
  • Read More
06Aug

UK security centre to launch IoT security standard

The London-based Centre for Strategic Cyber Space and Security Science is working on an internet of things security standard and has roped in participants from eight markets.  The UK-based Centre for Strategic Cyber Space and Security Science (CSCSS) is planning to launch a new internet of things (IoT) security standard later this year in an […]
  • Posted by Smeeta Padhiar
  • On 6th August 2018
  • 0 Comments
  • cyber security, Cyber space, IoT, IT security
  • Read More
03Aug

UK Shipper Was Held to Ransom After 2017 Breach

Clarksons has finally released more details of a 2017 data breach, claiming the hacker demanded a ransom for the stolen information. The UK-headquartered shipper said it discovered unauthorized access to its systems between May 31 and November 4 last year. The attackers got in via a “single and isolated user account” which was subsequently disabled. Read […]
  • Posted by Smeeta Padhiar
  • On 3rd August 2018
  • 0 Comments
  • cyber attack, cyber security, data protection, GDPR, information security, ransomware
  • Read More
02Aug

Reddit’s hack response causes concern

Social media site Reddit has suffered a data breach, but has refused to disclose its scale. The site said it discovered in June that hackers compromised several employees’ accounts to gain access to databases and logs. They were able to obtain usernames and corresponding email addresses – information that could make it possible to link […]
  • Posted by Smeeta Padhiar
  • On 2nd August 2018
  • 0 Comments
  • cyber attack, cyber security, data breach, data protection, hack, information security, Reddit
  • Read More
01Aug

National Crime Agency flags up need for more big data skills

The National Crime Agency’s second-in-command wants the organisation to build the data and analytics skills of its investigators to help combat rising cybercrime. Deputy director general Nina Cope said that, as “more and more threat is going online”, the agency needs to ensure the technology and data expertise of its investigators keeps pace with that […]
  • Posted by Smeeta Padhiar
  • On 1st August 2018
  • 0 Comments
  • big data, cyber crime, cyber security, NCA
  • Read More
01Aug

Home Office awards over £100 million to police transformation projects

The Police Transformation Fund was launched in 2016 to prepare police to respond to changing crime threats and invest in digital technology. The government is investing more than £100 million of the Police Transformation Fund (PTF) in projects designed to prepare police forces to adapt to the challenges of the future. Read full story. 
  • Posted by Smeeta Padhiar
  • On 1st August 2018
  • 0 Comments
  • cyber crime, cyber threat, police
  • Read More
31Jul

Dixons Carphone says data breach affected 10 million

Dixons Carphone has said a huge data breach that took place last year involved 10 million customers, up from its original estimate of 1.2 million. The Carphone Warehouse and Currys PC World owner has been investigating the hack since it was discovered in June. It said personal information, names, addresses and email addresses may have […]
  • Posted by Smeeta Padhiar
  • On 31st July 2018
  • 0 Comments
  • Carphone Warehouse, cyber security, data breach, data protection, Dixons Carphone, information security
  • Read More
30Jul

DPC receives over 1,100 reports of data breaches since start of GDPR rules

More than 1,100 reports of data breaches involving people’s personal information have been received by the Data Protection Commission in the two months since a new EU legal regime came into force.  The 1,184 reports to the commission mean data breach reports are significantly up on the average of 230 reported each month in 2017. Read […]
  • Posted by Smeeta Padhiar
  • On 30th July 2018
  • 0 Comments
  • data breach, Data Privacy, data protection, GDPR, information security
  • Read More
30Jul

Burden of data protection rests on firms and governments

A senior executive at Singapore’s Cyber Security Agency stressed the role of corporate data governance and government regulations in raising the bar on cyber security. The onus is on companies and government agencies to ensure that data breaches are taken seriously, according to a senior executive at Singapore’s national cyber security agency. Read full story. 
  • Posted by Smeeta Padhiar
  • On 30th July 2018
  • 0 Comments
  • cyber security, data breach, data protection, GDPR, information security
  • Read More
30Jul

CCTV User Group conference

September is a new month for the annual conference of the CCTV User Group, incorporating the National Association of Surveillance Camera Managers (NASCAM). Titled ‘the changing face of surveillance’, it’s running from September 3 to 5, at Whittlebury Hall, Towcester, Northamptonshire. Read full story. 
  • Posted by Smeeta Padhiar
  • On 30th July 2018
  • 0 Comments
  • cctv, cyber security, Mike Gillespie, NASCAM, surveillance camera commissioner, Tony Porter
  • Read More
27Jul

Smart Home Security Camera Bug Exposed

Security researchers have found a flaw in a home security camera model which could allow individuals to view users’ video feeds. The bug was found in the SWWHD-Intcam, also known as the Swann Smart Security Camera, which has been on sale in several high street retailers including Currys and Walmart for the past eight months. Read […]
  • Posted by Smeeta Padhiar
  • On 27th July 2018
  • 0 Comments
  • cyber attack, data protection, Information Security. Cyber Security, vulnerabilities
  • Read More
25Jul

Cyber security further education and higher education research

The Government is undertaking research to understand the provision of teaching of cyber security in further and higher education. Part of this work includes surveys and interviews to understand the landscape and provision of cyber security courses and modules in further and higher education institutions. This will help to inform future Government policy. Read full story. 
  • Posted by Smeeta Padhiar
  • On 25th July 2018
  • 0 Comments
  • cyber security, IT security, UK Gov
  • Read More
25Jul

Suffolk mother’s anger after NHS data shared against her wishes

Jessica Holt was one of 150,000 people whose confidential health records were potentially shared against their wishes. This was down to a coding error in the SystmOne computer system run by TPP and used by some GPs. The glitch meant requests from patients to not have their information used for any reason unrelated to their […]
  • Posted by Smeeta Padhiar
  • On 25th July 2018
  • 0 Comments
  • cyber security, data protection, data security, information security, IT security, NHS
  • Read More
23Jul

ICO’s annual report reveals increased public awareness of privacy and information rights issues

New laws and high profile investigations have helped put data protection and privacy at the centre of the UK public’s consciousness like never before, the Information Commissioner has said. As the ICO’s annual report for 2017-18 was published, Elizabeth Denham said her second year in the role had been ‘one of increasing activity and challenging […]
  • Posted by Smeeta Padhiar
  • On 23rd July 2018
  • 0 Comments
  • data protection, data security, Elizabeth Denham, GDPR, ICO, information security
  • Read More
23Jul

UK Gov Launches Consultation to Speed-Up Cybersecurity Strategy

The Department for Digital, Culture, Media and Sport (DCMS) has launched a consultation into developing the cybersecurity profession in the UK to support the National Cyber Security Strategy (NCSS). To support this effort, it has also proposed to create a UK cybersecurity council, which would sit independently of the government. Read full story. 
  • Posted by Smeeta Padhiar
  • On 23rd July 2018
  • 0 Comments
  • cyber security, information security, IT security, NCSS, UK Gov
  • Read More
19Jul

Huawei cyber security evaluation centre: oversight board annual report 2018

This is the fourth annual report for the National Security Adviser from the Huawei Cyber Security Evaluation Centre (HCSEC) Oversight Board. It has now completed its fourth full year of work and has covered a number of areas of HCSEC’s work over the course of the year 2017 to 2018. Read report here. 
  • Posted by Smeeta Padhiar
  • On 19th July 2018
  • 0 Comments
  • cyber security, Gov UK, huawei, IT security, threat intelligence
  • Read More
19Jul

City of London Police warn over fraudsters faking university orders

Companies supplying universities have been warned that fraudsters are faking domain names of educational institutions to defraud victims out of vast sums of money. According to Action Fraud, this type of fraud, known as European distribution fraud, happens when a company from overseas (usually from Europe) delivers products to the UK, but isn’t paid for the […]
  • Posted by Smeeta Padhiar
  • On 19th July 2018
  • 0 Comments
  • cyber crime, cyber security, fraud, hacking, IT security, risk management, Security, Universities
  • Read More
18Jul

Independent Inquiry into Child Sexual Abuse fined £200,000 for revealing identities of possible abuse victims in mass email

The Independent Inquiry into Child Sexual Abuse (IICSA) has been fined £200,000 by the Information Commissioner’s Office (ICO) after sending a bulk email that identified possible victims of non-recent child sexual abuse. The Inquiry, set up in 2014 to investigate the extent to which institutions failed to protect children from sexual abuse, did not keep […]
  • Posted by Smeeta Padhiar
  • On 18th July 2018
  • 0 Comments
  • data protection, GDPR, ICO, information security, Insider threat, IT security
  • Read More
17Jul

Mobile devices lost in London underline security risk

The security risk of lost mobile devices is underlined by the fact that almost 26,000 mobile phones and computing devices were lost in London in the past year alone.  Businesses are being urged to recognise the potential security risks of lost mobile phones and computing devices in the latest report from think tank Parliament Street. Read […]
  • Posted by Smeeta Padhiar
  • On 17th July 2018
  • 0 Comments
  • cyber security. mobile security, London, mobile devices, Security, security risk
  • Read More
13Jul

Investigation into Aberdeen City Council tax form data breach

An investigation is under way after hundreds of tax forms containing personal information were sent to the wrong staff at Aberdeen City Council. The local authority confirmed an “error” resulted in 947 P11D expenses and benefits forms being incorrectly issued last week. Read full story. 
  • Posted by Smeeta Padhiar
  • On 13th July 2018
  • 0 Comments
  • Aberdeen City Council, data breach, data protection, information security
  • Read More
Advent IM, cyber essentials
Advent IM, G-Cloud, Crown Commercial Supplier, Cyber Security services,
Advent IM ISO27001 certification, ISO 27001, information security, cyber security,
Advent IM ISO9001

We pride ourselves on putting our clients first…

...our approach is both consultative and facilitative and each solution is bespoke to your business needs and drivers.
Find out more...