{"id":464,"date":"2021-03-15T08:30:40","date_gmt":"2021-03-15T08:30:40","guid":{"rendered":"https:\/\/www.virginmediadatabreach.co.uk\/news\/?p=464"},"modified":"2021-03-05T13:16:40","modified_gmt":"2021-03-05T13:16:40","slug":"data-protection-and-the-importance-of-appropriate-security-measures","status":"publish","type":"post","link":"https:\/\/www.virginmediadatabreach.co.uk\/news\/data-protection-and-the-importance-of-appropriate-security-measures","title":{"rendered":"Data protection and the importance of appropriate security measures"},"content":{"rendered":"

When a data breach occurs, organisations often try to point the finger at cybercriminals or employees who made one-off errors. This may demonstrate an attempt to distract from the endemic negligence of data protection law at their company. If a company is found to have failed to implement appropriate security measures, it stands to reason that they can be held responsible for the exposure of people’s information.<\/p>\n

Every third party in possession of your personal data has a requirement by law to protect this data sufficiently, or they risk falling foul of data protection law. Last year, Virgin Media found itself in this precarious position after mistakenly exposing the information of 900,000 people.<\/p>\n

If you were affected by the Virgin Media data breach, you may be able to claim compensation for the harm you were caused<\/strong><\/a>. You can use one of our sign-up forms now<\/strong><\/a> to find out if you are eligible to join our group action.<\/p>\n

<\/p>\n

Did Virgin Media have appropriate security measures?<\/strong><\/h3>\n

The error at the root of the Virgin Media data breach has brought much criticism upon the company, as it does appear to indicate an absence of appropriate security measures or, at least, the incorrect application of these measures. The leak of personal data, including email addresses, postal addresses and phone numbers, was provoked due to a failure to secure a marketing database. Virgin Media stated that the database had been \u201cincorrectly configured\u201d by a staff member who, we can only assume, must not have been following the correct procedures.<\/p>\n

The error was made worse by the fact that it was not identified until ten months had passed, meaning that the private data had been accessible online for almost a year. In our view, this lengthy exposure period could also indicate that appropriate security measures were not in place, due to a lack of routine monitoring procedures that could have picked this error up long before March 2020.<\/p>\n

Holding Virgin Media accountable<\/strong><\/h3>\n

The apparent failure to apply appropriate security measures meant that the personal data was accessed by an unauthorised user at least once, making victims vulnerable to several different kinds of data misuse. The security risks could include the black market sale of their information, the use of email addresses to bombard victims with phishing scams, and\/or the use of phone numbers to carry out cold-calling scams.<\/p>\n

As such, to hold Virgin Media accountable for exposing them to security risks, victims can claim compensation<\/strong><\/a> for any of the following factors:<\/p>\n