Levales Solicitors LLP

Summary

Levales Solicitors LLP received a reprimand from the ICO for failing to implement appropriate security measures under UK GDPR Articles 32(1)(b) and 32(1)(d). A threat actor accessed their cloud server using legitimate credentials and published data affecting 8,234 individuals, with 863 at high risk due to the sensitive nature of the information involved.