The UK Information Commissioner’s Office (ICO) fined Interserve Group Limited £4.4 million after finding that shortcomings in its data security left personal information vulnerable to a cyber-attack in 2020. The ICO said the attack affected data relating to up to 113,000 employees. Its monetary penalty notice records the incident period as 30 March to 2 May 2020; the ICO’s annual report lists 24 October 2022 as the date of the fine.
Why was Interserve fined £4.4 million?
The ICO found that Interserve had not processed personal data in a way that ensured appropriate security, as required by the UK GDPR. The regulator said the company’s failings left it vulnerable to the attack that took place between 30 March and 2 May 2020. The penalty notice covers contraventions from 2019 to 1 December 2020.
The ICO applied Articles 5(1)(f) and 32 of the GDPR. Article 5(1)(f) requires personal data to be processed with appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage. Article 32 requires organisations to use appropriate technical and organisational measures to protect personal data, taking account of factors such as the risks involved.
How many employees were affected?
The ICO said the attack affected personal data relating to up to 113,000 employees. That figure describes the potential scale of the affected population; the notice cited here does not establish how many people experienced identity theft, financial loss or other confirmed misuse of their information.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
How did the ICO explain the penalty?
The Commissioner said the amount was intended to be effective, dissuasive and proportionate, taking into account the failings, Interserve’s status at the time and steps taken to improve measures and reduce future risk to data subjects. The monetary penalty notice states: “Having considered all of the factors set out above, the Commissioner has decided to impose a penalty on Interserve of £4,400,000 (four million, four hundred thousand pounds), on the basis that this would be effective, dissuasive and proportionate given the failings identified, the current status of the company and steps taken to improve measures which mitigate the future risk to data subjects.”
The notice also addressed Interserve’s financial position, stating: “Having considered the information provided by Interserve in relation to its financial position, there is insufficient evidence that Interserve would be unable to pay the proposed penalty such that it would not be appropriate to impose a penalty of that sum.”
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is known about the fine’s procedural status?
The ICO’s annual report records that it fined Interserve on 24 October 2022. The materials cited here establish the original penalty decision, but do not establish whether the penalty was later appealed, paid, reduced or otherwise changed. The notice should therefore not be described as proof of final payment or an unchallenged outcome.
Quick Recap
Rank #3
- Made in USA - Proudly produced in Ohio by a Veteran-owned business
- Comprehensive Coverage: This BookFactory log book includes essential fields such as post/shift, time of change, date, weather conditions, and a designated space for detailed notes. This ensures that all relevant information is captured and easily accessible.
- Sturdy Cover: The trans-lux cover protects the log book from wear and tear, ensuring its longevity and maintaining the integrity of your recorded data.
- Essential Security Tool: This log book is an indispensable tool for any organization that values security and accountability. It helps to prevent misunderstandings, improve communication, and ensure a smooth transition between shifts.
- Wire-O with Trans-lux cover, 100 Pages, Dimensions 8.5" x 11" - (Security-Pass-Down) Reorder SKU: LOG-100-7CW-PP(Security-Pass-Down)
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →
