Morrisons not responsible for 2014 data breach

Stefan Mileschin · 5th April 2020, 07:32

Supreme Court ruling

The UK's Supreme Court ruled that British supermarket group Morrisons cannot be held liable for a 2014 data breach in which a former employee posted personal details of over 100,000 staff members on internet.

Morrissons faced compensation claims from thousands of former and current employees over the security incident.

In 2017, London's High Court had held Morrisons responsible for the publication of the employees' data by Andrew Skelton, former IT auditor at the company, who was later convicted for his wrongdoings and sentenced to an eight year jail term.

In November 2013, Morrisons was told to send payroll data of the company's entire workforce to external auditors, in the same way as he had previously done in 2012. He did this and saved a personal copy which he uploaded on a website and also sent it anonymously to three UK newspapers.

After the company learned about the data breach, it immediately took steps to remove employees' information from the internet and called in the coppers.

A large number of affected employees of the company later filed a lawsuit against the supermarket group, accusing it of breaching its statutory duty under the Data Protection Act, misusing private details of employees, and also breaching the confidence of workers.
https://fudzilla.com/news/50593-morr...14-data-breach

5th April 2020, 07:32	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,726	Morrisons not responsible for 2014 data breach Supreme Court ruling The UK's Supreme Court ruled that British supermarket group Morrisons cannot be held liable for a 2014 data breach in which a former employee posted personal details of over 100,000 staff members on internet. Morrissons faced compensation claims from thousands of former and current employees over the security incident. In 2017, London's High Court had held Morrisons responsible for the publication of the employees' data by Andrew Skelton, former IT auditor at the company, who was later convicted for his wrongdoings and sentenced to an eight year jail term. In November 2013, Morrisons was told to send payroll data of the company's entire workforce to external auditors, in the same way as he had previously done in 2012. He did this and saved a personal copy which he uploaded on a website and also sent it anonymously to three UK newspapers. After the company learned about the data breach, it immediately took steps to remove employees' information from the internet and called in the coppers. A large number of affected employees of the company later filed a lawsuit against the supermarket group, accusing it of breaching its statutory duty under the Data Protection Act, misusing private details of employees, and also breaching the confidence of workers. https://fudzilla.com/news/50593-morr...14-data-breach

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Yahoo must pay $50 million to data breach victims	Stefan Mileschin	WebNews	0	25th October 2018 08:36
Pentagon data breach compromises up to 30,000 workers	Stefan Mileschin	WebNews	0	15th October 2018 08:03
Equifax breach may have exposed more data than first thought	Stefan Mileschin	WebNews	0	15th February 2018 05:23
The FTC is looking into Uber's latest data breach	Stefan Mileschin	WebNews	0	24th November 2017 19:10
Equifax data breach is also being investigated by UK officials	Stefan Mileschin	WebNews	0	28th October 2017 09:34
The FTC is investigating Equifax's data breach	Stefan Mileschin	WebNews	0	16th September 2017 08:05
TalkTalk fined £100,000 for long-forgotten 2014 data breach	Stefan Mileschin	WebNews	0	13th August 2017 13:01
Three caught up in another embarassing data breach	Stefan Mileschin	WebNews	0	23rd March 2017 13:18
Yahoo confirms over 500 million users affected in 2014 breach	Stefan Mileschin	WebNews	0	26th September 2016 07:29
Uber data breach compromises IDs of 50,000 drivers	Stefan Mileschin	WebNews	0	2nd March 2015 06:39