Authority
ICO
Country
United Kingdom
Date Issued
October 9, 2023
Industry
Technology
Summary
Optionis Group Limited suffered a ransomware attack resulting in personal data exfiltration due to inadequate security controls including lack of multi-factor authentication, insufficient account lockout policies, and absence of a clear Bring Your Own Device policy. The ICO issued a reprimand for these UK GDPR infringements.
Violation Types
Data BreachSecurityRisk Assessment
Articles Violated
Related Enforcement Actions
Avoid enforcement risk with automated compliance
IQWorks helps organizations automate UK GDPR compliance before regulators come knocking.
Talk to an Expert