All posts
10.01.22
Lexis Nexis Interview: Misuse of private information claims – where are we after Lloyd v Google?
Percy Preston of Brett Wilson LLP is interviewed about the future of misuse of private information claims after the Supreme Court’s decision in Lloyd v Google [2021] UKSC 50 What are the key points the Supreme Court made in Lloyd v Google regarding misuse of private information claims? It is important to note that the…
Read more14.12.21
Press Release: Mensa pays Eugene Hopkinson libel damages
British Mensa Limited and its directors have agreed to pay defamation damages and costs to former director Eugene Hopkinson after publishing a series of statements that alleged he was responsible for a data leak and cyberattack and had deliberately attempted to harm Mensa and its membership. The settlement was announced at a hearing before Mr…
Read more21.05.20
EasyJet victim of massive cyber attack
EasyJet has reported to the Information Commissioner’s Office (‘ICO’) and the National Cyber Security Centre that is has been the subject of a ‘highly sophisticated’ cyber security breach affecting close to 9 million customers. It became known to the airline in January 2020 that sensitive data, including email addresses, travel details and credit card details…
Read more1.01.20
ICO hands down its first fine under the GDPR
On 17 December 2019 the Information Commissioner’s Office (‘the ICO’), the UK’s independent regulator for data protection and information rights, fined a London pharmacy £275,000 for failing to ensure the security of personal data, including ‘special category’ data. This is the first administrative fine to be handed down by the ICO under the new data…
Read more16.04.19
Pregnancy club fined £400,000 for sharing personal data of 14 million individuals
Bounty UK, an online club for pregnancy and parenthood advice has been fined £400,000 by the Information Commissioner’s Office (‘ICO’) following the discovery that the personal data of its users had been shared with 39 other companies without informed consent. A copy of the Monetary Penalty Notice can be found here. Bounty UK collected personal…
Read more16.11.18
Employer held liable for employee’s data breach, even though his objective was to damage them
On 22 October 2018, the Court of Appeal dismissed the supermarket chain’s appeal in the case of Various Claimants v WM Morrison Supermarkets PLC [2018] EWCA Civ 2339, where Morrisons had been held vicariously liable at first instance for a mass data breach caused by the criminal act of a rogue employee (see our blog…
Read more9.09.18
BA hit by massive data breach
British Airways (‘BA’) has reported that between 10.58pm on 21 August and 9.45pm on 5 September 2018, it was the victim of a ‘sophisticated, malicious’ cyber attack resulting in the theft of personal and financial data belonging to up to 380,000 customers who booked flights via the BA app and website during that time period….
Read more3.09.18
Air Canada data Leak could result in hefty fine and lead to claims
Air Canada has reported that their app has been subject to a data breach resulting in the theft of data from around 20,000 accounts. It states that it detected unusual activity between 22 and 24 August 2018 and as a precaution locked all 1.7 million accounts held with the company. The source of the breach…
Read more18.07.18
Independent Inquiry into Childhood Sexual Abuse fined £200,000 for email data leak
The Information Commissioner’s Office (the ICO) has fined the Independent Inquiry into Childhood Sexual Abuse (IICSA) £200,000 following a data leak on 27 February 2018. The leak occurred when a member of staff sent a ’round-robin’ email, but mistakenly used the ‘to’ field instead of the ‘bcc’ field, inadvertently disclosing the email addresses of 90 individuals…
Read more16.02.18
Data Breach : Compensation claims for mass data breaches
In January 2014, Andrew Skelton, an apparently disgruntled employee of Morrisons Supermarket posted a file containing the personal data (including salaries, bank details, and National Insurance numbers) of 99,998 Morrisons’ employees on a file-sharing website. It seems his intention was to cause mass-scale damage to the supermarket. In March 2014, a CD containing the data…
Read moreLegal Disclaimer
Articles are intended as an introduction to the topic and do not constitute legal advice.
