CYBERSECURITYTRACKER
Permanent story citation

Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10762

As cited

Copy frozen at (site build).

ransomware

Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data

Two Welsh organisations, Ogi Networks Limited and Data Cymru, were reprimanded by the Information Commissioner's Office (ICO) after a ransomware attack exposed personal data of 3,300 individuals, mostly children. The attack succeeded due to weak security practices, including easily guessable passwords.

Why it matters: Organisations handling children's data must audit password policies and access controls immediately; the ICO's enforcement action signals heightened scrutiny of credential hygiene in regulated sectors.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

Welsh firms ‘Password1’ and ‘Test 2’ fails led to hackers stealing children’s data

Two Welsh organisations, Ogi Networks Limited and Data Cymru, were reprimanded by the Information Commissioner's Office (ICO) after a ransomware attack exposed personal data of 3,300 individuals, mostly children. The attack succeeded due to weak security practices, including easily guessable passwords.

Why it matters: Organisations handling children's data must audit password policies and access controls immediately; the ICO's enforcement action signals heightened scrutiny of credential hygiene in regulated sectors.

VendorsMicrosoft
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary