Posts by IE84

Dixons fined £500,000 by ICO for crap security that exposed 5.6 million customers' payment cards

"We have no confirmed evidence of any customers suffering fraud or financial loss as a result.”

Always love seeing this line used by any company investigating a cyber attack or breach. Just because they have no evidence, doesn't mean it hasn't happened. The reality is that there is so much data already out in the wild, that information from multiple breaches are more likely to be combined. Therefore making it virtually impossible for any indvidual company to find "evidence" that their breach caused fraud or financial loss.

This is a standard requirement for organisations to validate an individual before carrying out certain requests under data protection regulation.

Re: Millions for lawyers but not one penny for data security

BA haven't been fined yet and nor have Marriott. They were an intention to fine. The ICO have been dragging their heels on both matters.