Call us now:
The UKs elections watchdog, the Electoral Commission has disclosed it has been hacked. The Commission alludes to the hack starting in August 2021 and being discovered in October 2022, that begs the question why was it not discovered for 14 months, and why it has it taken 10 months to reveal the hack. The watchdog said that it held the names and addresses of people in the UK who registered to vote between 2014 and 2022, but could not confirm what files were accessed by he hacker. So likely does not know what was taken.
One has to say that by responding that although the registers contained names and addresses (that is PII), stating the theft did not itself presents a ‘high risk’ to individuals is contradictory to UK GDPR and data protection regulations. Names and Addresses is PII. Personal data is information that relates to an identified or identifiable individual.
Defending the delay, commission chair John Pullinger said: If you go public on a vulnerability before you have sealed it off, then you are risking more vulnerabilities. It does not take 10 months to close a system vulnerability, no matter how ‘sophisticated’ the attack.
When is a hack not sophisticated?
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #databreach #ukgdpr
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7094817409034776576