The Vice Society, a hacking group that often targets US schools, has released stolen confidential data relating to several UK schools: Schools hit by cyber attack and documents leaked – BBC News Student, parent and staff information was compromised and included pay and contract details, passport scans and pupil special …
One of my trusted sources hit but a suspected ransomware attack UPDATED
This post was first published on 22 December 2022. Update 4 January 2023 The story has moved on and The Guardian has contacted the Information Commissioner’s Office (ICO) to report the breach. Staff are still being told to work from home. No information about what data may have been impacted …
Continue reading “One of my trusted sources hit but a suspected ransomware attack UPDATED”
Google action to protect small businesses
Google is recognising the impact its services have on the success of smaller businesses, and how scammers are taking advantage to exploit those same businesses. The article covers the legal actions Google has taken; the scams that are being run in its name and advice on how to deal with …
Continue reading “Google action to protect small businesses”
The Department of Education lack of due diligence
The Information Commissioner’s Office has found that staff at The Department of Education allowed a gambling company access to 28 million children to check if they were 18 when opening an account: No-one needs persuading that a database of pupils’ learning records being used to help gambling companies is unacceptable. …
Continue reading “The Department of Education lack of due diligence”
Royal Mail Click and Drop website closed
The Royal Mail had to close its Click and Drop website this week, as a security slip up allowed some customers access to information, they should not have been able to see. Royal Mail customer data leak shutters online Click and Drop • The Register Engineers solved the issue within …
Some security advice for any business…
If you collect a lot of information that would be of particular interest to threat actors, such as personally identifiable information (PII), bank account details etc, make sure you take care of that information. Or the government could set up an age verification site – and all the threat actors …
A phishing email leads to a £4.4m fine
I write a lot about phishing emails and social engineering attacks, because it is probably the way threat actors could most easily get malware inside your defences and from there compromise your security, your information and ultimately your wallet! The Berkshire based construction company, Interserve Group Ltd, with an employee …
