Case study: British Airways Data Breach Fine by ICO of £183.4million
ICO has announced today that after an extensive investigation it is intending to issue a fine of £184.39 million to British Airways for for infringements of the General Data Protection Regulation (GDPR).
In September 2018, British Airways has announced that there was a data breach and as many 500,000 customer records were stolen. A card skimming group called Magecart is believed to be behind the attack. The same group was involved in Ticker Master data breach. The group has exploited the scripts running on the website and used to steal the data.
What happens now? British Airways has 28 days to appeal against the decision and fight the case. I am 100% sure that they will appeal and try to reduce the fine amount. Regardless of what happens with this case the message is clear. The ICO is doing it's job and handing the fines if regulations are breached. It's time to take the security and privacy seriously in your organisation.
The GDPR fines are either 4% of the global turnover or £20Million whichever is the highest. For most of us, £20million fine would put us straight out of the business. Would you like to be known as the person that put your company out of business because you didn't take security seriously?
The best time to plant security is at the start and the second best time is now. Start today, look at what assets you have, classify them, assess the risk and start taking steps to minimise the risk. For most businesses Cyber Essentials, Cyber security policy, multi factor authentication, User education can be very good starting point and quick wins.
Get in touch if you need help.
Related Articles
TechForce Cyber Talks Cyber Security to the Portlethen Academy Students
TechForce's Arbrar visits Portlethen Academy to educate the students on Cyber Security wellness and provide hints and tips for ensuring they are cyber safe.
More5 Reasons to get Cyber Essentials and Plus for your Business
There have been a few changes made to the framework in the year 2022 and 2023. The changes in 2022 were major and 2023 were not so much.
MoreWhat Exactly Happens During the Cyber Essentials Plus Technical Audit?
This is one of the most frequently asked questions, what exactly happens during the Cyber Essentials Plus audit or sometimes we get asked ‘what is the exact process for Cyber Essentials Plus...
MoreCyber Essentials for Remote Businesses
Cyber essentials refer to the fundamental technical controls and practices that businesses need to have in place to protect their digital systems and data from cyber threats.
More
FOR LATEST UPDATES SUBSCRIBE HERE: