Cathay Pacific fined over crooks slurping its database for over 4 years

The ICO found a “catalog of errors,” including backups without passwords, unpatched servers, no-longer-supported OSes and feeble anti-virus. Continue reading Cathay Pacific fined over crooks slurping its database for over 4 years

Privacy watchdog throws wider net to protect children online

A new, comprehensive code will compel online services to put children’s health and safety before data-collecting profits. Continue reading Privacy watchdog throws wider net to protect children online

Marriott Hit With $123M Fine For Massive 2018 Data Breach

The data breach fine against Marriott by the Information Commissioner’s Office comes a day after British Airways was also penalized. Continue reading Marriott Hit With $123M Fine For Massive 2018 Data Breach

Facebook acts like a law-breaking ‘digital gangster’, says official report

Facebook considers itself to be “ahead of and beyond the law,” UK lawmakers said in a report about “disinformation and ‘fake news.'” Continue reading Facebook acts like a law-breaking ‘digital gangster’, says official report

Uber fined $1.17 million by U.K., Dutch authorities for 2016 breach

Ridehailing company Uber drew fines totaling $1.17 million from British and Dutch authorities on Tuesday for its handling of a 2016 data breach that exposed the personal information of roughly 57 million passengers and drivers. The breach occurred in October 2016, revealing names, email addresses, phone numbers and driver’s license numbers belonging to many users. Uber paid hackers $100,000 to keep quiet and destroy the stolen data. Customers were first notified when the company’s new CEO announced the incident a year later. The United Kingdom’s Information Commissioner’s Office, in issuing a fine of £385,000 ($491,284) on Tuesday, said that a “series of avoidable data security flaws” led to the exposure of personal data of 2.7 million riders and 82,000 drivers in the country. The Dutch Data Protection Authority also issued a fine of €600,000 ($679,257) on Tuesday, saying that the breach affected 174,000 Dutch citizens and that Uber violated the […]

The post Uber fined $1.17 million by U.K., Dutch authorities for 2016 breach appeared first on Cyberscoop.

Continue reading Uber fined $1.17 million by U.K., Dutch authorities for 2016 breach

Facebook gets fined £500,000 by U.K. for Cambridge Analytica ordeal

Facebook is getting hit with the maximum penalty allowable under United Kingdom law for a scandal in which the social media website failed to keep user data out of the hands of the political research firm Cambridge Analytica. The U.K. Information Commissioner’s Office (ICO) announced on Thursday that it is fining Facebook £500,000 ($664,000) for “serious breaches of data protection law.” The ICO initially announced its intent to levy the fine in July. “Facebook failed to sufficiently protect the privacy of its users before, during and after the unlawful processing of this data. A company of its size and expertise should have known better and it should have done better,” said Elizabeth Denham, the U.K.’s information commissioner said, in a statement. The ICO fine is the maximum that U.K. law allowed at the time the Cambridge Analytica ordeal went down, the office said. That’s based on the Data Protection Act […]

The post Facebook gets fined £500,000 by U.K. for Cambridge Analytica ordeal appeared first on Cyberscoop.

Continue reading Facebook gets fined £500,000 by U.K. for Cambridge Analytica ordeal

Heathrow Airport escapes hefty GDPR fine; gets only £120,000 (under 1998 DPA) for 2017 privacy breach incident

The UK Information Commissioner’s Office has fined Heathrow Airport Limited (HAL) £120,000 for failing to ensure that the personal data on its network was properly secured. The circumstances that led to the fine circulated widely in the medi… Continue reading Heathrow Airport escapes hefty GDPR fine; gets only £120,000 (under 1998 DPA) for 2017 privacy breach incident