London celebrity talent agency reports itself to ICO following Rhysida attack claims

A London talent agency has reported itself to the UK's data protection watchdog after the Rhysida ransomware crew last week claimed it had attacked the business, which represents luminaries of stage and screen. The Agency was established in 1995 and clients include Louis De Bernieres, Sam Mendes, Emma Thompson, and many more …

[steviebuk]

Why

The fuck have they got passport scans. You can use them at the time of sign up but then they are required to be deleted after as they should no longer be required.

[abend0c4]

Re: Why

In the bit of southern Europe where I currently live, you need to send a copy of your identify documents (passport, residence permit or identity card) for even the most trivial of transactions, even to join clubs and societies. There must be dozens of copies of my passport sitting in people's email archives or stuffed inside binders in open offices. But the imperative is to have the correct document, not to have a genuine document and so the security of the documents is not really a consideration.

The same thing is gradually happening in the UK. If you require potential employers or landlords to verify people's right to live or work in the country (for example), they need not only to do that but to be able to prove subsequently that they have done so. In the absence of a secure government system for doing that, they're going to hang on to the evidence because the penalties for breaches of data protection rules are considerably less than the penalties for failing to check on their eligibility to work.