ICO reprimands two Welsh bodies after children's data stolen
Original title: Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data
A November 1, 2024 ransomware attack exposed 3,300 people, mostly children, through a long-lived Test2 account.
The UK Information Commissioner's Office reprimanded Ogi Networks Limited and Data Cymru after a ransomware attack on November 1, 2024. Attackers stole personal data belonging to 3,300 people, the vast majority of them children. The intrusion used a test account named Test2 that had existed for more than 12 years and was either still active or reactivated before the breach.
Unconfirmed: The excerpt explains only the Test2 account; the Password1 failure named in the title is not detailed.
- Ogi Networks Limited and the Local Government Data Unit – Wales were both reprimanded.
- The Test2 account had existed for more than 12 years.
- The headline also cites a Password1 failure, which this excerpt does not explain.
- The post links the full ICO reprimands for both organisations.
Impact: Personal data of 3,300 people, mostly children, stolen
- Organizations
- Information Commissioner's Office
- Countries
- United Kingdom
From the original article
2 min read at databreaches.netAlex Hickey reports: Two Welsh organisations have been censured by the Information Commissioner’s Office (ICO) after a ransomware attack led to the theft of personal data belonging to 3,300 individuals, the vast majority of whom were children. Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales, known as Data Cymru, received reprimands... Source
By Dissent · databreaches.net
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.