Equifax fined €500k over data breach

A credit reference agency that failed to protect the details of 15 million people in the UK during a cyber attack has been fined ?500,000.
The personal information lost or compromised during the incident between 13 May and 30 July 2017 ranged from names and dates of birth to addresses, passwords, driving licence and financial details.
The Information Commissioner's Office (ICO) found that Equifax's systems to manage the personal information were inadequate and ineffective, while investigators found significant problems with data retention, IT system patching and audit procedures.The investigation, carried out in conjunction with the Financial Conduct Authority, found that parent company Equifax Inc had been warned by the US Department of Homeland Security about a "critical vulnerability" two months before the cyber attack.Information commissioner Elizabeth Denham said: "The loss of personal information, particularly where there is the potential for financial fraud, is not only upsetting to customers, it undermines consumer trust in digital commerce."This is compounded when the company is a global firm whose business relies on personal data."We are determined to look after UK citizens' information wherever it is held."The attack on Equifax affected 146 million customers globally. The €500,000 fine imposed on its UK operation is the highest possible under the Data Protection Act 1998, which was in operation at the time of the data breach.The new General Data Protection Regulation (GDPR) allows for penalties of up to €20m euros (€17.7m) or 4% of global turnover, whichever is higher. In the case of Equifax, this could have amounted to €120m.
See also:
Leave a comment
  • Latest
  • Read
  • Commented
Calendar Content
«    Август 2020    »