972,191 files encrypted after ransomware attack
The present fine is related to a data breach incident that occurred at the law firm.
On August 24, 2020, it was discovered that Tuckers Solicitors LLP had been the victim of a ransomware attack that encrypted 972,191 files belonging to 24,712 court files. That was determined after an investigation. In addition, 60 of these files, which also contained sensitive personal data, were published by the hackers on hacker forums.
The U.K.’s data protection authority, the ICO, imposed the fine because it believed the law firm had inadequate security measures in place that enabled the attack. This was considered a violation of the principle of integrity and confidentiality.
Entscheidungsdatum:
28.02.2022
Land:
United Kingdom
Art des Verstoßes:
inadequate data protection
Betroffene Datensätze:
972191
Waren sensible Daten betroffen?:
Yes
verhängte Geldstrafe:
€ 117,295,-
Violation of GDPR Paragraph:
5. Principles relating to personal data processing
Quelle:
Fine notice from the ICO