Violazioni · 141 giorni fa
Il vero fallimento qui non è la nota di riscatto. Un intruso con livello domain-admin è rimasto all’interno di un’utility idrica per 21 mesi, e la violazione è emersa solo perché le prestazioni IT sono rallentate, il che significa che il monitoraggio di routine non ha mai segnalato un compromesso completo già in corso.
5 fonti che coprono questa storia
UK fines water supplier $1.3M for exposing data of 664k customers
The Information Commissioner's Office has fined South Staffordshire Water Plc and parent company South Staffordshire Plc £963,900 ($1.3 million) over a cyberattack that exposed the personal data of 663,887 customers and employees.
UK ICO fines South Staffordshire Water nearly £1M over Cl0p breach, signals tougher utility cyber defense oversight.
South Staffordshire Water Fined £1m After Data Breach
The ICO has fined South Staffordshire Water nearly £1m for a series of data protection failings
Poor security left hackers inside water company network for nearly two years - Help Net Security
The UK ICO fined South Staffordshire Water’s parent company £963,900 after a phishing attack exposed data belonging to 633,887 people.
The Record from Recorded Future
UK water company allowed hackers to lurk undetected for nearly two years, regulator finds
The Information Commissioner's Office (ICO) fined South Staffordshire Water £963,900 ($1.3 million) on Monday over an attack by the Cl0p ransomware group that led to the personal data of 633,887 customers and employees being published in August 2022.
Part of the PlainSec briefing for 2026-05-12