disagreed

Blog

Hacked law firm ‘didn’t think it was a data breach’ – the ICO disagreed

A UK law firm has been fined after failing to report a cyber attack, claiming it didn’t think it constituted a data breach. The Information Commissioner’s Office (ICO) has hit Merseyside-based DPP Law with a £60,000 penalty for the 2022 hack, which saw sensitive personal data leaked on the dark web. A lack of multi-factor authentication (MFA) on a rarely-used…