Inadequate security of personal data leads to £4,400,000 fine
Because Interserve Group Limited had not set up sufficient technical and organisational measures, a phishing attack was not only successful, it also took months to recover the affected data. Most of the mistakes could have been easily avoided.