Company News

The long-running saga of the BA data breach reached its conclusion (probably) last week with the announcement by the Information Commissioner’s Office (ICO) of a £20m fine.  Initial comments focused on the huge reduction from the £183m fine that the ICO initially proposed last year; but this is still a significant fine, both in total […]

Twitter experienced a major outage last night, with tens of thousands of users around the world unable to use the platform for over an hour.  The issue appears to have been resolved now and Twitter have stressed that there is no evidence of a security breach; attributing the outage to an “inadvertent change” to their […]

According to the latest figures from the International Standards Organisation (ISO), covering the period up to the end of 2019, there have been significant increases in the number of certifications to ISO 22301 and ISO 27001 globally: Unfortunately no direct comparison is possible with earlier years as the basis of the survey was changed in […]

Donald Trump has been roundly criticised for his most recent comments downplaying the severity of Covid-19.  It appears that he has inferred from the fact that he appears to have had a mild form of the disease (although he is not out of the woods yet) that all Covid-19 infections are mild and there is […]

The National Cyber Security Centre has issued a specific alert to higher education institutions after a recent spike in attacks.  In particular, both Northumbria and Newcastle Universities have come under attack in the last few weeks.  These attacks come at the most critical time in the academic year, as universities recruit new students and prepare […]

We have studiously refrained from giving a running commentary on the Covid-19 crisis in our blog, but I was intrigued to hear the Archbishop of Canterbury’s comments reported this morning on the need to delegate elements of the crisis response to a local level.  This struck a particular chord because I used to use the […]

This is certainly not a new book (the most recent edition came out in 2018), but I only recently became aware of its existence and relevance to risk and crisis management.  Richards Heuer enjoyed a distinguished career in the CIA and wrote the book primarily for his fellow intelligence professionals (and consumers of intelligence such […]

A number of prominent UK universities are amongst hundreds of organisations globally whose data has been stolen in a ransomware attack on cloud-computing provider Blackbaud.  Remarkably, it has emerged that Blackbaud was attacked back in May but waited two months to inform its users.  It has also emerged that they paid an undisclosed ransom in […]

The BBC have published a fascinating birds-eye view of a ransomware attack at the University of California San Francisco this week.  Acting on a tip-off, the BBC were able to follow the on-line ransom negotiations as they happened, culminating in the payment of $1.14m.  We can only speculate, but the willingness of the university to […]

There are many interesting lessons to learn in the unfolding saga at on-line sports retailer Wiggle… Customers first started raising concerns over two weeks ago about orders being placed on their Wiggle accounts (and payments taken) without their knowledge.  Some people also reported that they had been locked out of their accounts.  The company’s initial […]