recent work

Crown Paint Website investigated for possible Data Breach

Readers of a website owned by Crown Paints have spotted that a company customer database had been published online, in full.
www.theregister.co.uk discovered this possible data breach late last week, (http://www.theregister.co.uk/2010/10/21/crown_paints_data_fail/), although have obviously not provided the link to the page that contains the personal details of all customers who had filled in an enquiry form. Details on show included full names, address, telephone numbers and details of the enquiry made.
The ICO has been informed of the situation, to which they replied:
“We have recently been informed of a possible data breach which may involve Crown Decorating Centre.
“We will be making enquiries into the circumstances of the alleged breach of the Data Protection Act before deciding what action, if any, needs to be taken.”

Comment
Absolute Data works with many organisations to reduce or eliminate the risk to the personal information that they hold about individuals. The “softer side” of privacy risk management such as staff training and having documented procedures is often overlooked and under-funded in organisations and an area where we can have a big impact for a modest investment.  For further information, please contact us now on info@absolute-data.co.uk.