简体中文
繁體中文
English
Pусский
日本語
ภาษาไทย
Tiếng Việt
Bahasa Indonesia
Español
हिन्दी
Filippiiniläinen
Français
Deutsch
Português
Türkçe
한국어
العربية
Abstract:Equifax Ltd fined £11 million by the FCA for a significant 2017 data breach affecting 13.8 million UK consumers. The oversight resulted from mismanaged outsourcing and neglecting known security vulnerabilities. The breach revealed names, birthdates, and other personal data, stressing the importance of robust data protection in the evolving digital world.
Equifax Ltd has been fined £11 million by the UK's Financial Conduct Authority (FCA) in a major measure to safeguard customers' personal data. This judgment is the result of the company's inability to safeguard the security of UK consumer data, which it had outsourced to Equifax Inc. in the United States.
The failure traces back to 2017 when Equifax Inc. experienced one of the worst computer breaches ever documented. Cyber hackers successfully accessed the personal information of almost 13.8 million UK customers as a result of Equifax's negligence. Names, birthdates, phone numbers, login passwords, certain credit card details, and home addresses were among the data breaches.
The critical aspect to note here is that the breach was avoidable. Equifax did not categorize its ties with its parent company as 'outsourcing', which led to a glaring lapse in supervising how the shared data was safeguarded. Equifax Inc. had known vulnerabilities in its security systems, but adequate actions were not taken to shield UK consumers' data.
Adding salt to the wound, Equifax Ltd was left in the dark about the breach concerning UK consumers for a whole six weeks post the discovery by Equifax Inc. The UK entity only got wind of the breach five minutes before its announcement by the US parent company. This timing disparity resulted in Equifax being overwhelmed by the influx of complaints and subsequently delayed reaching out to its UK customers.
Post the breach, Equifax's public statements further muddied the waters.
Their disclosures on the breach's implications miscommunicated the true extent of affected UK consumers. To worsen matters, the company didn't maintain rigorous quality assurance checks for post-breach complaints, leading to multiple complaints being improperly addressed.
Therese Chambers, Joint Executive Director of Enforcement and Market Oversight at the FCA pointed out the intrinsic duty of financial institutions to protect consumer data, saying, Financial firms possess customer data that's a prime target for criminals. The onus is on them to safeguard it.
Equifax's reaction to the breach only exacerbated their initial failure.
She further emphasized the ever-present threat of identity theft, urging companies to adhere to the highest data protection standards, given the relentless evolution of cyber threats.
Jessica Rusu, FCA's Chief Data, Information, and Intelligence Officer, stressed the increasing relevance of cybersecurity and data protection in ensuring the robustness of financial services. She mentioned, “Beyond just technical responsibilities, firms carry an ethical obligation in handling consumer information.”
As the digital landscape evolves, and threats become more sophisticated, it's evident that companies, big or small, must prioritize data protection and ensure that any outsourcing decisions are backed by stringent oversight and security measures.
Disclaimer:
The views in this article only represent the author's personal views, and do not constitute investment advice on this platform. This platform does not guarantee the accuracy, completeness and timeliness of the information in the article, and will not be liable for any loss caused by the use of or reliance on the information in the article.
Cross-border payments are now faster, cheaper, and simpler! Explore fintech, blockchain, and smart solutions to overcome costs, delays, and global payment hurdles.
Solana hits $264 on Coinbase, breaking its 3-year high with an 11% daily surge. Learn what’s driving SOL's meteoric rise and the crypto market rally.
The UK Financial Conduct Authority (FCA) has issued a public warning regarding a fraudulent entity impersonating Admiral Markets, a legitimate and authorised trading firm. The clone firm, operating under the name Admiral EU Brokers and the domain Admiraleubrokerz.com, has been falsely presenting itself as an FCA-authorised business.
A 57-year-old Malaysian man recently fell victim to a fraudulent foreign currency investment scheme, losing RM113,000 in the process. The case was reported to the Commercial Crime Investigation Division in Batu Pahat, which is now investigating the incident.